In This Issue

• Halloween Cyber Risks & How to Avoid Them
• Everyday Cyber Safety Tips

From the desk of Jason Balderama, Chief Information Security Officer, County of Marin

October is Cybersecurity Awareness Month. It's also the season for tricks, treats, and spooky surprises. Unfortunately, cybercriminals use the same themes to trick people into clicking malicious links, sharing personal information, or downloading dangerous apps.

This month, as we enjoy costumes and candy, take a few minutes to protect yourself from digital “tricks.”

Halloween Cyber Risks & How to Avoid Them

Spooky Phishing Bait. Be cautious of emails or texts that appear to come from costume shops, candy brands, or haunted house ticket sites offering limited-time deals or free giveaways. These may contain links that lead to fake websites designed to steal your login credentials or credit card details.

Tip: Before clicking any link, hover over it to preview the URL and confirm it leads to a legitimate web site. If something seems off, go directly to the company’s official website instead of clicking the link.

Fake Online Promotions & Sweepstakes. Fraudsters often use themed promotions like “win a free costume” or “enter to get a candy gift card” to lure victims. These scams can trick you into sharing personal information or making unnecessary payments.

Tip: Treat any unexpected offer with skepticism. Verify promotions by visiting the company’s official social media or website. Avoid entering contests that request sensitive information like your Social Security number or banking details.

Malicious Apps and Downloads. Halloween-themed mobile games, photo filters, or flashlight apps can sometimes hide malware that can steal data or track your activity.

Tip: Only download apps from official app stores such as Google Play or Apple’s App Store. Check the app’s reviews, publisher, and permissions before installing.

Online Shopping Scams. With costumes, decorations, and candy shopping in full swing, criminals create fake online stores to collect payments for items that never arrive.

Tip: Stick to well-known retailers and verify that the site address starts with “https://.” Use a credit card instead of a debit card for added protection and be wary of deals that seem too good to be true.

Social Media Tricks. Scammers may use Halloween-themed posts or quizzes (“What’s your spooky name?”) to collect personal details that could be used for identity theft or password guessing.

Tip: Think before you post or play. Avoid sharing personal information that could reveal password reset answers or security question clues.

Everyday Cyber Safety Tips

Even after Halloween, these simple steps will help protect you year-round.

• Use strong, unique passwords and enable multi-factor authentication on all accounts.
• Keep software and devices updated to close security gaps.
• Back up important files to a secure cloud or external drive.
• Beware of phishing emails and be cautious with links and attachments.

Copyright © 2025 County of Marin, All rights reserved.

Disclaimer

The information provided in Marin CyberSafe News is intended to increase people’s awareness of cybersecurity and to help them behave in a more secure manner. Links in this newsletter are provided because they have information that may be useful. The County of Marin does not warrant the accuracy of any information contained in the links and neither endorses nor intends to promote the advertising of the resources listed herein. The opinions and statements contained in such resources are those of the author(s) and do not necessarily represent the opinions of County of Marin.