As States Lag on Cyber Training, Agencies Are Fertile Phishing Grounds

While hackers and cybercriminals frequently target state computer systems, many states don’t require every employee to get cyber awareness training. Answering a seemingly routine HR email, the Utah workers typed in their credentials as requested.And then they had a paycheck stolen.Cybercriminals had tricked the state workers into opening fake links. The scammers used the information to access the state payroll system and change employees’ direct deposit information, diverting their paychecks into phony bank accounts.Only three workers fell victim to the June scam, thanks in part to Utah’s mandatory cyber awareness training, said Chief Information Officer Michael Hussey.But that training is not standard practice in all states.