[LPIL - Board of Directors] Phishing Warning

[Jake Leonard]

I thought the eight-digit code we got every time we logged in to the 
website was our 2FA for each login.

Perhaps, if there is an intended rule to be put in place, that this is 
put in the agenda for September?

*Jake Leonard*
*Interim Chairman and Executive Director | ChrisMont Libertarian Central 
Committee* (/Christian County, Montgomery County/)
/*Congress*: 15/ | /*Montgomery County*: Illinois Senate 54/55, Illinois 
House 107/108/110/ | /*Christian County*: Illinois Senate 48/54, 
Illinois House 95/96/107/108/

*Political Director | Libertarian Party of Illinois*
800 Capps Ave. | Nokomis, IL 62075-1415
*Mobile*: (217) 565-9709 <tel:2175659709> | (217) 565-9273 
<tel:2175659273> || *Work*: (217) 569-4230 ext. 700 <tel:2175694230,700> 
| (217) 718-5281 <tel:2177185281> || *Fax*: (217) 717-8079 <tel:2177178079>


On 8/29/2023 11:56 AM, Matthew Piron via Lpil-bod wrote:
> The most serious breach would be if an outside actor gained access to 
> the CRM. Perhaps we could look into the possibility  of two factor 
> authentication for CRM access? Also, perhaps a rule should be 
> introduced that any official LP business being discussed on one to one 
> basis be conducted over phone or video conference call?
>
> -Matthew Piron
>
> On Aug 28, 2023 8:10 PM, Alexa Maffei via Lpil-bod 
> <lpil-bod at lists.lpillinois.org> wrote:
>
>     I actually think this is a serious problem that we really need to
>     look further into and if I'm being honest, I'm a little concerned
>     by people's lack of concern. I would've brought it up to discuss
>     at the last BOD meeting, but I couldn't attend due to it
>     conflicting with another libertarian meeting. I agree with Ken
>     that information security violations are going to happen; however,
>     there's a difference between getting a suspicious email telling
>     you to click a link to 'find hot singles in your area' and someone
>     reaching out to several people in leadership and successfully
>     impersonating the leader of our state party. This is the phishing
>     email I (and others) received:
>     In hindsight, it's definitely strange, but there are no red flags
>     within the message itself like misspelled words, weird links or
>     attachments, requests for personal info, or anything seemingly
>     nefarious or suspicious. At my job, I regularly work with datasets
>     containing social security numbers and my company occasionally
>     sends out fake phishing emails as tests to ensure tech employees
>     like myself report anything suspicious. Yet I didn't realize this
>     was actually a phishing attempt until Bob mentioned it to me
>     offhand a little over a week ago. We need to figure out what
>     happened here and probably look into taking some additional
>     measures to ensure sensitive information is not compromised.
>
>     Best,
>     Alexa
>     ---
>     Alexa Maffei
>     State Central Committee Rep, 10th District
>     Libertarian Party of Illinois
>     scc10 at lpillinois.org
>     (815) 274-1976
>
>
>     On 2023-08-20 23:36, Ken Mattes via Lpil-bod wrote:
>
>         In my volunteer work with the McHenry County EMA I am privy to
>         sensitive information, as it is with my work with LPIL.
>
>         Cyberterror is our region's top threat by far. Drought is way
>         behind in second place. Both of these threats have a 100%
>         chance of happening; in other words, these things WILL happen;
>         it's not a question of if; it is a question of when and where.
>
>         The Board of Directors of the Libertarian Party of Illinois is
>         comprised of some of the best individuals I have ever meet.
>         Not a single one of us would ever ask any of you to do
>         anything surrepticiously. Our team does not operate that way.
>
>         Please contine to report any scurrilous messages or emails to
>         our team, and attach screenshots if you can.
>
>         On 2023-08-20 21:15, Justin Tucker via Lpil-bod wrote:
>
>             Team -  It has come to my attention that several people
>             have received emails seemingly from Bill Redpath and
>             possibly other board members with no subject line vaguely
>             asking them to chat a little via email. This is actually a
>             phishing attempt. Do not open the email. If you have done
>             so already, do not respond, and absolutely do not provide
>             any personal information, click on any links, or download
>             any attachments in it. If you suspect an email you've
>             received could be suspicious, hover over the sender's
>             name. A pop-up with their email address will appear. If it
>             isn't chair at lpillinois.org or wredpath2 at yahoo.com, it is
>             not Bill Redpath. Someone received one from a Gmail
>             account called officemaile712.
>
>             If you have received or receive an email like I described
>             or any email that you find suspicious, please let me know
>             as soon as possible.
>
>             Best,
>             Justin Tucker
>             Executive Director, Libertarian Party of Illinois
>
>
>         -- 
>         Ken Mattes
>         Secretary, Libertarian Party of Illinois
>         secretary at lpillinois.org
>         815 342 5177
>
>
>

-- 
This email has been checked for viruses by Avast antivirus software.
www.avast.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lpmail.lp.org/pipermail/lpil-bod/attachments/20230829/a224e2fb/attachment-0001.htm>