Dallas County has fallen prey to a cunning scam, kissing goodbye to a hefty sum of $2.4 million due to what appears to be a sophisticated con involving fraudulent emails. As informed by Dallas County Administrator Darryl Martin, the scammers impersonated a legitimate contractor's business email to dupe the county into making the sizeable payment. Uncovered on November 17, the exact timeline of the fraudulent transfer remains under wraps, with the county staying mum on the details surrounding the initial detection, as reported by The Dallas Morning News.
Investigation duties for the scam have been handed over to the FBI, though the agency has yet to publicly confirm the initiation of a probe. Looking at Dallas County’s recent record with technology, this scam is the latest blip in a series of IT fiascos. The county had previously sold laptops that retained personal data and suffered from a faulty payroll system rollout, which resulted in incomplete paychecks for county employees. These mishaps even prompted a U.S. Department of Labor investigation earlier this year, according to the Dallas Observer.
Martin has categorically stated that this wire transfer fiasco is not connected to a ransomware attack from October, where the county’s data ended up on the dark web. Instead, the scam was a result of "social engineering," a psychological ploy designed to trick the county officials into making a grave financial misstep. While the tactics continue to be analyzed, Martin has refrained from detailing the measures being put in place post-incident.
Further steps to tackle such vulnerabilities include a security audit of the auditor’s office, which is responsible for authorizing payments. Dallas County commissioners are set to hold this discussion in an executive session during Tuesday's meeting, an agenda item that's raising as many eyebrows as concerns.
