Webinar Replay Video 116: Cybersecurity for Trucking

WEBVTT

1
00:00:03.090 –> 00:00:05.000
Lydia Wommack: Good morning, everybody!

2
00:00:05.320 –> 00:00:20.230
Lydia Wommack: Hi, thank you so much for joining us the day after Memorial Day weekend. I hope everybody had a great and refreshing weekend. We’re back to business now on this Tuesday that feels like a Monday, but that’s okay, because we’re coming in with a very important topic.

3
00:00:20.230 –> 00:00:36.659
Lydia Wommack: Very, very, very important for trucking right now, because cybersecurity is really shifting, I think, from being an IT issue to being really an operational continuity issue, a cargo security issue. It’s hitting so many areas, and a lot of that’s because there’s so much

4
00:00:36.660 –> 00:00:40.519
Lydia Wommack: Technology in the industry now.

5
00:00:40.580 –> 00:00:48.109
Lydia Wommack: ELDs and telematics and training platforms, and dispatch systems and, you know, fuel management systems, and…

6
00:00:48.120 –> 00:01:06.169
Lydia Wommack: more and more and more, and the technology is great in a lot of ways, right? It helps our operations run more efficiently and run smoothly, but that means that there is a much larger attack surface when it comes to cybersecurity and threats facing us. So,

7
00:01:06.170 –> 00:01:26.539
Lydia Wommack: Rudy, thank you so much for joining us this morning. Rudy’s with TechBit Solutions, and we ran into him at TXTA, which is great, another great organization, and really loved visiting with him, and wanted him to join us to share with y’all what you need to be concerned about, and what you need to keep an eye on, and rudy, thank you again for joining us.

8
00:01:26.820 –> 00:01:40.510
Rudy Vazquez: Yeah, it’s my pleasure, Lydia and Mark, thank you for having me. And, I wanted to, address Mark’s question. Earlier, earlier today, Mark was asking me about the fish in the room, right? Some people have elephants, well, I have fish.

9
00:01:40.510 –> 00:01:51.740
Rudy Vazquez: So, quick story. We were out fishing in Kabul, right? We’re doing some deep-sea fishing. I love fishing. I’m a fisherman by trade. Well, not by trade, but in my other life.

10
00:01:51.920 –> 00:02:00.649
Rudy Vazquez: Anyways, we’re doing some deep-sea fishing, I catch this guy, like, one hour going into it, and as you’re fighting this fish, you know, you’ve got all the adrenaline running.

11
00:02:00.990 –> 00:02:12.499
Rudy Vazquez: And once we ring up the fish, it’s 4 or 5 hours later, one of the things they ask you, Mark, is, do you want to keep this fish? I said, oh yeah, of course I want to keep the fish, yeah, I’m taking that bad boy home.

12
00:02:12.730 –> 00:02:19.950
Rudy Vazquez: Worst mistake ever, Mark. Like, worst mistake ever. I got into so much trouble with my wife.

13
00:02:20.490 –> 00:02:22.820
Rudy Vazquez: It was $10,000 to put that guy up there.

14
00:02:23.720 –> 00:02:24.890
Rudy Vazquez: And so…

15
00:02:25.020 –> 00:02:29.769
Rudy Vazquez: What I did, Mark, what I did is I said, babe, I did this for you and me.

16
00:02:30.020 –> 00:02:43.769
Rudy Vazquez: it’s… it’s for my… for my webinars, and it’s… it’s a great icebreaker. Like, I can’t do webinars without it. So, that was 10 years ago. If you see her, just make sure you tell her, hey, that fish was a great icebreaker for the webinar. I don’t think she’ll believe that.

17
00:02:44.140 –> 00:02:46.550
Rudy Vazquez: near you, but… You had a cookie?

18
00:02:46.550 –> 00:02:48.560
Mark Rhea: Had a good return on that investment then.

19
00:02:48.560 –> 00:03:07.929
Rudy Vazquez: Well, she’s still waiting to see that, but hopefully, you know, it’ll come up soon. Thank you, Lydia, thank you. Okay, so, three things that you’re gonna get out of this, right? There’s 3 key takeaways that I’d like for you guys to keep in mind as we go through this. Number one, it’s going to be…

20
00:03:08.310 –> 00:03:11.760
Rudy Vazquez: Do you really need cybersecurity and IT support?

21
00:03:12.520 –> 00:03:17.120
Rudy Vazquez: If you do, what are going to be the few basic things to look for?

22
00:03:17.250 –> 00:03:22.290
Rudy Vazquez: Low cost, no cost. You know, what do you need to do? And number three.

23
00:03:22.470 –> 00:03:27.260
Rudy Vazquez: If you’ve never had cybersecurity, if you’ve never had IT support.

24
00:03:27.450 –> 00:03:39.469
Rudy Vazquez: how can you check to see if you’ve been breached? How can you check to see if you’ve been hacked? And most trucking companies, they have, you know, no idea. And so, when I first meet trucking company owners.

25
00:03:39.640 –> 00:03:44.530
Rudy Vazquez: the first objection I get Is… we don’t need cybersecurity.

26
00:03:45.450 –> 00:03:50.510
Rudy Vazquez: Mark, when do you think that finally company owners decide that they do need cybersecurity?

27
00:03:52.160 –> 00:03:53.229
Mark Rhea: When they get hacked.

28
00:03:53.410 –> 00:04:09.869
Rudy Vazquez: when they get hacked, when they get breached, right, when something happens, then it’s like, oh my god, who was that one guy? I saw him do a webinar for INFINITI Safety, Fleet Safety? Call Rudy, call that guy, hopefully, right? But normally, it’s not until something bad happens that they’re like, oh my god, what do I do now? So,

29
00:04:10.040 –> 00:04:14.900
Rudy Vazquez: Let’s jump into that. I’m gonna share my screen here, and hopefully you guys can all see it.

30
00:04:16.170 –> 00:04:17.029
Rudy Vazquez: And…

31
00:04:17.700 –> 00:04:28.229
Rudy Vazquez: We’ll start off with, we don’t need cybersecurity, and like I said, this is the number one objection that I get from most company owners. We don’t need it. We don’t want it.

32
00:04:28.820 –> 00:04:30.420
Rudy Vazquez: Can you guys see my screen okay?

33
00:04:31.540 –> 00:04:32.899
Lydia Wommack: Yes, we’ve got you.

34
00:04:33.100 –> 00:04:34.110
Rudy Vazquez: Perfect.

35
00:04:34.400 –> 00:04:43.540
Rudy Vazquez: Now, Mark, I’m assuming that when you parked your vehicle, this morning, first thing you do is you roll up the windows, and you lock the doors, right?

36
00:04:44.310 –> 00:04:45.150
Mark Rhea: Yes, sir.

37
00:04:45.150 –> 00:04:53.670
Rudy Vazquez: If I go out there and I try to open your car, if I try to open your windows, they’re all locked, I can’t get in, I can’t open the truck, all your valuables are secured in there.

38
00:04:53.730 –> 00:05:11.900
Rudy Vazquez: Same thing for your cell phones, right? If I pick up your cell phone right now, and I try to look at your personal text messages, if I try to get into your personal pictures, everything’s gonna be locked behind a pin, maybe biometric, you know, maybe some sort of facial recognition, right? All that data inside your cell phone? Safe.

39
00:05:12.020 –> 00:05:16.789
Rudy Vazquez: Secure behind that pin, or that biometric security that you put in place.

40
00:05:17.320 –> 00:05:22.030
Rudy Vazquez: But what I ask most trucking company owners is I say, what about your data?

41
00:05:22.280 –> 00:05:23.770
Rudy Vazquez: Is your data secure?

42
00:05:24.380 –> 00:05:40.119
Rudy Vazquez: 10 out of 10, it’s like, I don’t know. What data? Like, I think the IT guys got it somehow, right? I’m pretty sure he put some sort of antivirus in there. And 10 out of 10, that’s usually the first response that I get is, like, I don’t know.

43
00:05:40.400 –> 00:05:48.750
Rudy Vazquez: And so, The takeaway here is that cybersecurity isn’t about computers, it’s not an IT issue.

44
00:05:49.020 –> 00:05:54.830
Rudy Vazquez: What it is, is it’s a business issue, and it’s about operations, money.

45
00:05:55.050 –> 00:06:07.549
Rudy Vazquez: and downtime. Those are the three major things, that’s what it’s really about. So, I want to jump into, you know, those 3 things. And when I talk about operations, what I mean is, when you get breached.

46
00:06:07.670 –> 00:06:11.259
Rudy Vazquez: When you get hacked, Can you still work?

47
00:06:12.380 –> 00:06:18.660
Rudy Vazquez: 9 times out of 10, it’s gonna be kind of. Because what’s gonna happen is, your email systems are gonna go down.

48
00:06:19.100 –> 00:06:30.180
Rudy Vazquez: So what that means is that you’re not going to be able to send your customers updates, you know, hey, truck number 1234 is already making its way down, it’s already there, it’s on its way back. Updates stop.

49
00:06:30.550 –> 00:06:35.309
Rudy Vazquez: Your customers can’t reach back out to you, right? Because emails are completely down.

50
00:06:35.980 –> 00:06:51.900
Rudy Vazquez: Second thing that goes down is your phone systems. Our phone systems, 10 out of 10 phone systems right now in most companies are what are called VoIP phone systems. And what that means, Mark, is that those phone systems depend on the internet.

51
00:06:52.650 –> 00:07:01.670
Rudy Vazquez: So, internet’s gonna be broken because of the cybersecurity breach, because of the hack, so we can’t make phone calls the way we’re used to. Our auto attendant.

52
00:07:01.910 –> 00:07:03.010
Rudy Vazquez: It’s down.

53
00:07:03.710 –> 00:07:11.150
Rudy Vazquez: So most companies have to revert to, hey, can I borrow your cell phone? Hey, you know, can you call this customer? It turns into pure chaos.

54
00:07:11.380 –> 00:07:30.889
Rudy Vazquez: terrible. Next is our TMS. Our TMS is our truck management system. There’s a couple of big ones out there, and for most companies, your truck management system, that’s where everything lives, right? All your accounting, all your trucks, all your HR, all your payroll, all your customers.

55
00:07:31.160 –> 00:07:35.570
Rudy Vazquez: They’re all living inside your truck management system, and it goes down.

56
00:07:35.790 –> 00:07:43.190
Rudy Vazquez: Now, some companies say, well, My truck management system, it’s in the cloud, so should be safe, right?

57
00:07:43.700 –> 00:07:49.869
Rudy Vazquez: And what really happens is that just makes it easier for the hacker in the Philippines to access it from his house.

58
00:07:50.610 –> 00:07:59.029
Rudy Vazquez: So, he’s in, and they kicked you out. So when you get hacked, when you get breached, your truck management system goes down. And of course, now.

59
00:07:59.340 –> 00:08:01.380
Rudy Vazquez: Employees can’t do their jobs.

60
00:08:02.280 –> 00:08:04.999
Rudy Vazquez: So, when it comes to operations.

61
00:08:05.480 –> 00:08:10.039
Rudy Vazquez: Cybersecurity protects our ability to be able to operate.

62
00:08:10.400 –> 00:08:11.690
Rudy Vazquez: as a company.

63
00:08:12.780 –> 00:08:15.360
Rudy Vazquez: Do we have any questions on the operations piece?

64
00:08:18.290 –> 00:08:34.949
Mark Rhea: I got one. You mentioned TMS, you know, the data coming out of the camera system, the customer base. Why would somebody want that, or are they just trying to lock it up so that they can bribe you? What’s the motive behind

65
00:08:35.270 –> 00:08:37.599
Mark Rhea: hacking somebody’s TMS system.

66
00:08:38.390 –> 00:08:54.249
Rudy Vazquez: So, when they break into your TMS systems, what they’re trying to do is they’re gonna try to hold it for, number one, either for ransom, right? They’re gonna say, hey, pay me half a Bitcoin, or one-eighth of a Bitcoin, and I’ll give you your passwords back, or unencrypted.

67
00:08:54.640 –> 00:09:01.300
Rudy Vazquez: And let’s say if you do know about it, right? Because nowadays, with everything being in the cloud.

68
00:09:01.470 –> 00:09:14.440
Rudy Vazquez: A lot of people don’t know that their system has been compromised. So, what these hackers, what these bad actors, what they’re doing is they’re just keeping an eye on it, on your loads going in, going out, your customers.

69
00:09:14.760 –> 00:09:19.730
Rudy Vazquez: And a lot of times, this is where they do that double brokering. They’ll set up a load.

70
00:09:19.950 –> 00:09:24.760
Rudy Vazquez: They’ll go pick it up, and then… You’re stuck holding the bag.

71
00:09:25.090 –> 00:09:32.419
Rudy Vazquez: So that double brokering takes place because they have access to your truck management system, and that’s a… that’s a very big one, that’s a very good question, Mark.

72
00:09:33.700 –> 00:09:34.600
Rudy Vazquez: So.

73
00:09:35.260 –> 00:09:45.810
Rudy Vazquez: The next one that I want to talk about is I want to talk about the money piece, and I think, Mark, this is the one that surprises most people, because even if no data is actually stolen.

74
00:09:46.500 –> 00:09:50.380
Rudy Vazquez: A cybersecurity incident will always cost you money.

75
00:09:50.520 –> 00:09:54.130
Rudy Vazquez: Right? And one of the reasons is, number one, when all your systems go down.

76
00:09:54.300 –> 00:09:57.600
Rudy Vazquez: Payroll still has to run, right? You still have to pay your employees.

77
00:09:57.860 –> 00:10:10.369
Rudy Vazquez: And then, of course, you’re gonna have the cost of missed opportunities. Some trucking companies use the load boards to get loads. You’re not gonna be able to go on there. So, somebody else is going to be taking those loads.

78
00:10:10.460 –> 00:10:21.640
Rudy Vazquez: You’re not gonna be able to, send or receive customer information, so you’re gonna end up losing some of your customers. Because some of your customers are gonna say, you know what?

79
00:10:22.340 –> 00:10:28.760
Rudy Vazquez: That’s it. I’m gonna go find a different company, a different trucking company, a different brokerage to work with.

80
00:10:29.950 –> 00:10:38.549
Rudy Vazquez: Because you guys are just having too many problems. I tried emailing you, I couldn’t email you, I tried calling you, I couldn’t get ahold of you, and so your customer walks away.

81
00:10:39.280 –> 00:10:42.770
Rudy Vazquez: Because we didn’t take cybersecurity seriously.

82
00:10:43.100 –> 00:10:51.250
Rudy Vazquez: the customers that do end up staying, a lot of times, I see them asking for either credits or refunds, right? Because the contract that we have.

83
00:10:51.360 –> 00:10:57.189
Rudy Vazquez: Says, you’re supposed to give me updates every so often, but because your systems are down.

84
00:10:57.610 –> 00:11:04.850
Rudy Vazquez: you weren’t able to give me updates. So, I’m not gonna walk away as a customer, but give me a credit, or give me some sort of refund.

85
00:11:05.580 –> 00:11:20.860
Rudy Vazquez: And then lastly, the other piece, the money piece, it’s gonna be this guy, right? Because hopefully at this stage in the game, you already have a really good relationship with your cybersecurity and IT guy, because what’s gonna happen is, you’re gonna call that company up, and you’re gonna say, hey.

86
00:11:20.920 –> 00:11:25.990
Rudy Vazquez: I need you guys to come down here, like, yesterday. I need you guys to fix it right away.

87
00:11:26.230 –> 00:11:34.970
Rudy Vazquez: And that normally invokes extra costs, remediation fees, so that’s where your cybersecurity insurance

88
00:11:35.380 –> 00:11:38.999
Rudy Vazquez: Would kick in to cover those unanticipated costs.

89
00:11:39.520 –> 00:11:44.959
Rudy Vazquez: So… With cybersecurity, even though nothing was stalling.

90
00:11:45.960 –> 00:11:46.650
Rudy Vazquez: It’s…

91
00:11:46.760 –> 00:11:51.920
Rudy Vazquez: It’s still costing us money. And it’s just because you’re not aware of the bill yet, but it’s still there.

92
00:11:52.430 –> 00:11:54.390
Rudy Vazquez: Any questions on the money piece?

93
00:11:55.370 –> 00:12:01.799
Mark Rhea: Well, I was gonna ask about fuel, but I see that is in your next bullet point, so I’ll… I’ll defer that.

94
00:12:02.390 –> 00:12:12.519
Rudy Vazquez: Okay, awesome. Well, the next, bullet point is going to be talking about downtime. And downtime, Mark, what that means is how long are we actually offline?

95
00:12:12.940 –> 00:12:19.440
Rudy Vazquez: And so, every hour that our systems are down, you’re gonna have drivers sitting at terminals waiting for load assignments.

96
00:12:19.630 –> 00:12:38.069
Rudy Vazquez: You’re gonna have fuel cards that aren’t working, and the reason fuel cards are not working is because a lot of times, the way some of us work is we fill up those fuel cards as we need them, right? We’ll put some money on the fuel card, and then the drivers will go out there and then use them. But a lot of times, we don’t have that communication anymore.

97
00:12:38.350 –> 00:12:41.880
Rudy Vazquez: Drivers are going to be at the fuel island. We’re trying to fill up.

98
00:12:42.360 –> 00:12:43.689
Rudy Vazquez: And the car doesn’t work.

99
00:12:44.990 –> 00:12:55.809
Rudy Vazquez: Load assignments, we talked about that a little bit earlier, those are gonna stop just because there’s no more loads. We don’t know where we’re going, we don’t know where we’re coming from, so we’re lost.

100
00:12:56.320 –> 00:13:04.900
Rudy Vazquez: And the longer that we’re down, the more the damage compounds, so it just gets exponentially bigger and bigger and bigger.

101
00:13:05.060 –> 00:13:05.840
Rudy Vazquez: And…

102
00:13:06.900 –> 00:13:13.949
Rudy Vazquez: There’s an old Texas saying that we say here, that it’s no different than locking your gate at night, right? So most thefts

103
00:13:14.230 –> 00:13:17.420
Rudy Vazquez: Aren’t happening because the thief is smart.

104
00:13:17.890 –> 00:13:20.160
Rudy Vazquez: It’s just happening because you left the gate open.

105
00:13:20.380 –> 00:13:26.299
Rudy Vazquez: So, there’s no sophisticated Russian operative targeting your company specifically.

106
00:13:26.500 –> 00:13:33.640
Rudy Vazquez: You’re getting breached because your door is wide open. A motivated person with some basic AI tools can walk right in.

107
00:13:34.350 –> 00:13:36.819
Rudy Vazquez: Any questions on the downtime piece?

108
00:13:37.310 –> 00:13:46.049
Mark Rhea: Well, one quick question. Let’s… let’s assume that you… is it… is it a common practice for the… the bad… the bad actors

109
00:13:46.160 –> 00:13:57.600
Mark Rhea: To breach, and then… and then just monitor for a month, or six weeks, or… or wait until the right time before they enact some of these things?

110
00:13:58.460 –> 00:14:07.079
Rudy Vazquez: Mark, that’s super, super common. We’ve seen it. We do something that’s called a dark web scan, and the longer we scan, the longer we can go back in time.

111
00:14:07.610 –> 00:14:13.600
Rudy Vazquez: We’ve seen actors just hanging out for 6, 7, 10 years back in time.

112
00:14:13.600 –> 00:14:14.640
Mark Rhea: Readers, grinning.

113
00:14:14.640 –> 00:14:26.849
Rudy Vazquez: years. And a lot of times when I meet new trucking company owners, that they’re getting cybersecurity for the first time, I’ll show them the timeline, and I’ll show them, let’s go back to 2016.

114
00:14:27.150 –> 00:14:30.259
Rudy Vazquez: Did anything significant happen in 2016?

115
00:14:30.710 –> 00:14:38.170
Rudy Vazquez: And then they remember, oh yeah, we had that thing with that password, somebody stole our passwords and stuff, and yeah, it was pretty bad.

116
00:14:39.340 –> 00:14:55.520
Rudy Vazquez: But they didn’t change anything. They didn’t change their password. So I show them, look, 2016, here’s all your passwords. 2018, here’s all your usernames. 2022, you went to the truck management system that’s in the cloud. And the reason I know, because here’s your credentials.

117
00:14:56.120 –> 00:14:59.310
Rudy Vazquez: And they’re like, oh my god, already, like, I… we just didn’t know.

118
00:14:59.680 –> 00:15:03.890
Rudy Vazquez: We didn’t know we were supposed to do cybersecurity. We didn’t even know this was a thing.

119
00:15:04.170 –> 00:15:08.869
Rudy Vazquez: So, so yeah, Mark, to answer your question, they’ll hung out years and years and years, and…

120
00:15:09.150 –> 00:15:14.690
Rudy Vazquez: On my next slide, I’m gonna talk about what they do with that data, Mark, and this is…

121
00:15:14.830 –> 00:15:16.069
Rudy Vazquez: the dark web.

122
00:15:16.190 –> 00:15:19.450
Rudy Vazquez: Has anybody heard about the dark web before?

123
00:15:19.450 –> 00:15:28.999
Lydia Wommack: Okay, so I have heard of it, but it sounds fictional. It sounds like something you see in, like, an hour-long drama on, you know.

124
00:15:29.140 –> 00:15:32.800
Lydia Wommack: TV, so it’s real, I’m guessing.

125
00:15:32.800 –> 00:15:33.240
Rudy Vazquez: Yeah.

126
00:15:33.240 –> 00:15:33.960
Lydia Wommack: Because it’s real.

127
00:15:34.120 –> 00:15:38.540
Rudy Vazquez: It’s like, something you should be watching on Netflix, right? The dark web.

128
00:15:38.540 –> 00:15:39.050
Lydia Wommack: Yes.

129
00:15:39.050 –> 00:15:52.369
Rudy Vazquez: Okay, so let’s talk a little bit about the dark web, right? And this is what confuses most people. So, there’s 3 pieces to the internet, right? And the first piece, I like to call it the surface web.

130
00:15:52.490 –> 00:16:07.919
Rudy Vazquez: Surface Web, this is what you and I use every day. Let’s say, when I’m looking for a brisket recipe, do I use mustard, or do I use olive oil as my binder to make my brisket? You know, what’s the best recipe out there? So, that’s your surface web, just everyday browsing.

131
00:16:08.660 –> 00:16:11.149
Rudy Vazquez: The next one is gonna be the deep web.

132
00:16:11.290 –> 00:16:16.800
Rudy Vazquez: And the deep web, this is, like, Mark, when you go into your bank account, and you look at all the money you don’t have.

133
00:16:17.270 –> 00:16:20.520
Rudy Vazquez: That’s what the Deep Whip is, right? That’s your secure.

134
00:16:20.910 –> 00:16:28.780
Rudy Vazquez: web where you access with a username and a credential, right? And so that’s the deep web. Now, the last piece…

135
00:16:29.040 –> 00:16:39.780
Rudy Vazquez: That’s the most exciting piece, right? That’s the dark web. Now, on the dark web, you don’t end up on the dark web there by accident, right? It’s not like you were driving and, oh my god, I’m in a bad neighborhood. No, no.

136
00:16:40.140 –> 00:16:48.459
Rudy Vazquez: you end up there on purpose, right? You have to download a specific browser, there’s a couple of things that you have to do so you can actually browse the dark web.

137
00:16:48.760 –> 00:16:59.190
Rudy Vazquez: Now, the dark web, it’s not entirely criminal, right? It’s mostly, but not entirely criminal. It’s also used by whistleblowers.

138
00:16:59.350 –> 00:17:11.769
Rudy Vazquez: And it’s used by journalists in dangerous countries. And what they do is, a lot of times, is that’s where you can share information. So, does anybody remember the Silk Road?

139
00:17:12.109 –> 00:17:13.609
Rudy Vazquez: Anybody good at history?

140
00:17:14.510 –> 00:17:15.020
Rudy Vazquez: So…

141
00:17:15.020 –> 00:17:16.500
Mark Rhea: China?

142
00:17:16.800 –> 00:17:35.870
Rudy Vazquez: China, yep, yeah, yeah, it’s pretty close. So, the Silk Road, it used to be a trading route from China to the Mediterranean, right? And on the Silk Road, they would trade lots of goods, services, silk, you know, was a major one. Spices, salt used to be a really big thing. And so, that was a big trading route back then.

143
00:17:36.350 –> 00:17:41.449
Rudy Vazquez: In modern times, there was a guy by the name of Robert Ulbrich.

144
00:17:41.930 –> 00:17:45.809
Rudy Vazquez: Does that sound familiar to anybody? There’s a Netflix series on it.

145
00:17:46.930 –> 00:17:58.499
Rudy Vazquez: Robert Albrecht, what he did is he created a website, right? Think of, like, an eBay, if you will, but illegal eBay, and what he was selling was narcotics.

146
00:17:59.430 –> 00:18:13.310
Rudy Vazquez: Eventually, he was selling narcotics in the U.S. using the U.S. mail, and so the DEA got involved, Interpol, and they would, they would shut the website down, and the website would pop up in 3, 5 different more places.

147
00:18:13.780 –> 00:18:19.009
Rudy Vazquez: They finally got up to the guy, they arrested him, and they gave him 2 life sentences.

148
00:18:19.170 –> 00:18:20.960
Rudy Vazquez: No possibility of parole.

149
00:18:21.660 –> 00:18:24.770
Rudy Vazquez: So that was Robert Ulbrich. Last year.

150
00:18:24.900 –> 00:18:28.049
Rudy Vazquez: Donald Trump pardoned him, so he’s all free.

151
00:18:28.180 –> 00:18:32.279
Rudy Vazquez: So hopefully he doesn’t go back to, you know, to his bad ways.

152
00:18:32.790 –> 00:18:37.580
Rudy Vazquez: The second guy, Mark, I don’t know, have you guys ever heard of Edward Snowden?

153
00:18:38.670 –> 00:18:40.160
Rudy Vazquez: 20 years… a few years back.

154
00:18:40.160 –> 00:18:41.359
Lydia Wommack: Yes, of course.

155
00:18:41.790 –> 00:18:42.989
Rudy Vazquez: Okay, so…

156
00:18:42.990 –> 00:18:44.160
Lydia Wommack: I had a breach.

157
00:18:44.160 –> 00:18:58.660
Rudy Vazquez: Big one, right? And so Edward Snowden, for those of you that don’t know, he worked for the NSA, and he leaked classified documents on the dark web, and it revealed a global surveillance program.

158
00:18:58.660 –> 00:19:14.180
Rudy Vazquez: And so when people looked at those documents, the journalists, the news, they said, oh my god, this is, like, a real thing. Like, it’s Big Brother, you know, watching us, and hearing us, and, you know, seeing what we’re up to. So not just from our mobile phones anymore, but from everywhere. So that was a really, really big deal.

159
00:19:14.660 –> 00:19:17.030
Rudy Vazquez: Edward fled to Moscow.

160
00:19:17.460 –> 00:19:23.460
Rudy Vazquez: He slept at the airport for a few months, and then Russia gave him asylum there.

161
00:19:23.460 –> 00:19:24.210
Lydia Wommack: Hmm.

162
00:19:24.520 –> 00:19:31.399
Rudy Vazquez: So, that was Edward Snowden. So those are two quick examples of the dark web, how it’s being used in modern times.

163
00:19:31.530 –> 00:19:34.509
Rudy Vazquez: Now, the biggest question I get asked is.

164
00:19:35.340 –> 00:19:40.730
Rudy Vazquez: When somebody breaks into my network, when somebody breaks into my computers.

165
00:19:41.760 –> 00:19:51.330
Rudy Vazquez: what are they stealing, and what are they doing with it, right? Because, okay, you broke into my computer, like, now what? Like, all I have is fish pictures. Like, what do you need with my stuff?

166
00:19:51.510 –> 00:19:54.960
Rudy Vazquez: And so, for trucking companies, what this means is that

167
00:19:55.920 –> 00:20:02.610
Rudy Vazquez: they’re taking your dispatch and your truck management system credentials. And Mark, we were talking about this earlier.

168
00:20:03.040 –> 00:20:11.700
Rudy Vazquez: Where they’re monitoring, and they’re looking to see what loads you’re carrying, who the driver is, what truck number, where is it going, where is it coming from.

169
00:20:11.950 –> 00:20:18.440
Rudy Vazquez: And once they have all that information, they can set up double, triple brokerage. There’s a host of illegal things that they can do with that.

170
00:20:19.570 –> 00:20:32.349
Rudy Vazquez: The second thing that they want to take is your accounting email address, and this is a really, really, really big one. I’m starting to see this more and more across trucking companies in the US, and what they’ll do is…

171
00:20:32.700 –> 00:20:47.000
Rudy Vazquez: They won’t… they won’t take away the email, they won’t reset their password, they don’t want to do any of that stuff. They just want to know what the password is. So this is going to be, like, your AP, your accounts payable, at yourcompany.com, or your AR, right, your accounts receivable.

172
00:20:47.250 –> 00:20:49.220
Rudy Vazquez: at yourtruckingcompany.com.

173
00:20:49.440 –> 00:20:51.719
Rudy Vazquez: And what they’re doing with this is…

174
00:20:51.860 –> 00:20:54.600
Rudy Vazquez: They’re sending out emails to your customer.

175
00:20:55.150 –> 00:20:57.970
Rudy Vazquez: And what they’re gonna do is they’re gonna say, hey customer.

176
00:20:58.150 –> 00:21:01.890
Rudy Vazquez: Before, you were paying all those invoices to this, bank account.

177
00:21:02.520 –> 00:21:14.870
Rudy Vazquez: But, do me a favor, I switched bank accounts because they were charging me, like, crazy fees. So, we’re moving over to a different bank account now. Do me a favor. Any invoices going forward, pay them to this new bank account.

178
00:21:15.860 –> 00:21:18.460
Rudy Vazquez: And of course, your customer says, okay.

179
00:21:19.370 –> 00:21:24.260
Rudy Vazquez: So, 30, 60, 90 days from now?

180
00:21:24.520 –> 00:21:31.099
Rudy Vazquez: you’re gonna call your customer, and you’re gonna say, hey, customer, like, what’s going on? Like, I sent you all these invoices, you haven’t paid me.

181
00:21:31.630 –> 00:21:33.329
Rudy Vazquez: And your customer’s gonna say.

182
00:21:33.470 –> 00:21:37.470
Rudy Vazquez: You told me to pay you at that other bank account. Here’s the email. Came from you.

183
00:21:38.660 –> 00:21:40.450
Rudy Vazquez: Now you’re like, oh my god.

184
00:21:40.970 –> 00:21:43.330
Rudy Vazquez: So, from there, you’re gonna have two decisions.

185
00:21:43.450 –> 00:21:48.200
Rudy Vazquez: Either you suck it up, And you tell the customer we’re good?

186
00:21:48.510 –> 00:21:54.640
Rudy Vazquez: Or… You charge your customer again, and you make your customer pay you… again.

187
00:21:55.360 –> 00:21:58.939
Rudy Vazquez: Either way, 9 times out of 10, you’re gonna end up losing that customer.

188
00:21:59.290 –> 00:22:04.220
Rudy Vazquez: Because, of course, nobody wants to work with somebody that’s been hacked, or they’ve been breached.

189
00:22:04.350 –> 00:22:16.509
Rudy Vazquez: Because if you’re losing your information, more than likely you’re going to lose your customer’s information as well. So that’s a really, really big thing. Have any of you guys seen that before, or heard about that? Where they take over the accounting email address?

190
00:22:16.920 –> 00:22:18.309
Mark Rhea: I have heard of that, yes.

191
00:22:18.890 –> 00:22:20.430
Rudy Vazquez: Yeah, it’s… it’s nuts.

192
00:22:20.550 –> 00:22:27.170
Rudy Vazquez: The other thing that we don’t realize, and this is one of the things that we do when we do our cybersecurity analysis.

193
00:22:27.520 –> 00:22:38.430
Rudy Vazquez: We look at it to see if you have any social security or driver’s license numbers on your computers. And this surprises a lot of people, because they’re like, no, I don’t have social security number, why would I have a social security number on there?

194
00:22:39.540 –> 00:22:45.649
Rudy Vazquez: And a lot of times, we find out, hey, it’s a generous computer that has over 200 social security numbers.

195
00:22:45.920 –> 00:22:51.890
Rudy Vazquez: Or… this computer over there has all these driver’s license numbers, or pictures of driver’s license.

196
00:22:52.160 –> 00:23:02.260
Rudy Vazquez: And most people don’t realize it. And what do you guys think that they can do? If the bad actors get a hold of your social security number, they get ahold of a driver’s license number, what bad things do you think they can do with that?

197
00:23:05.360 –> 00:23:06.940
Mark Rhea: Get into your bank account.

198
00:23:07.480 –> 00:23:12.009
Rudy Vazquez: They didn’t get into your bank account, they can create a new bank account under your name.

199
00:23:12.290 –> 00:23:19.209
Rudy Vazquez: They can create, new… they can open up new credit cards. Identity theft is a big one.

200
00:23:19.450 –> 00:23:28.389
Rudy Vazquez: There’s a ton, and I’ve heard of horror stories where even employees End up suing their employer.

201
00:23:28.900 –> 00:23:34.480
Rudy Vazquez: Because what happens is that they tell, their attorney, like, hey, I was gonna go buy a house.

202
00:23:35.070 –> 00:23:38.090
Rudy Vazquez: But my employer didn’t secure my data.

203
00:23:38.370 –> 00:23:40.870
Rudy Vazquez: And now I’m a victim of identity theft.

204
00:23:40.990 –> 00:23:42.809
Rudy Vazquez: And it’s because of my employer.

205
00:23:43.660 –> 00:23:49.040
Rudy Vazquez: And that turns into, like, a really, really hard, hard scenario to… to be in.

206
00:23:49.800 –> 00:23:55.169
Rudy Vazquez: But… Biggest reasons why companies get hacked?

207
00:23:55.710 –> 00:24:07.330
Rudy Vazquez: is we’re reusing the same password across all of our systems, right? So, to log into my computer, it’s password 1. To log into my bank account, it’s password 123.

208
00:24:07.440 –> 00:24:10.709
Rudy Vazquez: To log into my other bank account, it’s password1234.

209
00:24:10.820 –> 00:24:19.539
Rudy Vazquez: And so on. And so when hackers get these passwords, they’re feeding it to AI, and they’re saying, try that password across all systems.

210
00:24:20.790 –> 00:24:27.349
Rudy Vazquez: And it doesn’t take long to see, oh, this password actually fit on my LinkedIn profile. It also fit on that bank account.

211
00:24:28.000 –> 00:24:31.809
Rudy Vazquez: And that’s how the hackers start breaking into your different systems.

212
00:24:32.360 –> 00:24:34.389
Rudy Vazquez: So, so yeah, really,

213
00:24:34.730 –> 00:24:39.649
Rudy Vazquez: Really scary stuff, and literally, like you said, it’s something out of a Netflix movie.

214
00:24:40.300 –> 00:24:53.520
Lydia Wommack: It is, and I imagine that you run into people all the time, because this is what I’m thinking myself and, like, trying to stop. I imagine you run into people all the time who say, yeah, okay, if it’s real, fine, but I’m…

215
00:24:53.680 –> 00:25:06.290
Lydia Wommack: just a small person in Texas, or I’m just a little company, you know, 50 truck company in East Texas, what do they want with me? They’re a much bigger fish to go after, so,

216
00:25:06.450 –> 00:25:10.159
Lydia Wommack: what do they want with us? Why is it appealing to go out?

217
00:25:10.160 –> 00:25:10.730
Rudy Vazquez: After your turn.

218
00:25:10.730 –> 00:25:11.490
Lydia Wommack: companies.

219
00:25:12.090 –> 00:25:18.000
Rudy Vazquez: Right? And one of the biggest reasons, Lydia, for that is Because it’s easy.

220
00:25:18.000 –> 00:25:18.710
Lydia Wommack: Hmm.

221
00:25:19.200 –> 00:25:27.869
Rudy Vazquez: The smaller trucking companies? 50, 100? And, well, and I say smaller, but I really shouldn’t say that. It’s more of who has the doors open.

222
00:25:28.030 –> 00:25:28.840
Lydia Wommack: Right?

223
00:25:28.840 –> 00:25:30.679
Rudy Vazquez: Because the way they work is.

224
00:25:31.120 –> 00:25:38.810
Rudy Vazquez: They’ll feed this data into an AI system, and the AI system will just start scanning, scanning, scanning.

225
00:25:39.040 –> 00:25:41.340
Rudy Vazquez: And then finally they thought, oh, there’s a door open here.

226
00:25:41.500 –> 00:25:42.729
Rudy Vazquez: They walk right in.

227
00:25:42.960 –> 00:25:44.040
Rudy Vazquez: That’s all they do.

228
00:25:44.230 –> 00:25:47.479
Rudy Vazquez: They just walk right in. And sometimes that’s a big trucking company.

229
00:25:47.480 –> 00:25:51.549
Lydia Wommack: Making it easier to just follow the path of least resistance.

230
00:25:51.550 –> 00:25:52.930
Rudy Vazquez: least resistance

231
00:25:53.100 –> 00:26:02.459
Rudy Vazquez: Right. They’re after… they’re after that person that didn’t lock their car, right? If I can just open your car, oh, there’s a purse there. Boom, grab it, and I’m out.

232
00:26:03.320 –> 00:26:14.980
Rudy Vazquez: If I’m a hacker, I’m not gonna waste time cloning your key fob and, you know, getting that rolling RFID code and trying to unencrypt that. No, no, no. They’re gonna go after who left their car door unlocked.

233
00:26:15.230 –> 00:26:15.850
Lydia Wommack: Okay.

234
00:26:16.000 –> 00:26:23.749
Rudy Vazquez: That’s what they’re really after. So, it gets, it gets frustrating, because it’s like, guys, all we have to do is some… some basic things, right?

235
00:26:24.270 –> 00:26:26.120
Lydia Wommack: So yes, where is our car unlocked?

236
00:26:27.660 –> 00:26:28.960
Lydia Wommack: I know, you’ve got it.

237
00:26:28.960 –> 00:26:34.179
Rudy Vazquez: Right? And so, that brings us up to our next question, is…

238
00:26:34.340 –> 00:26:36.649
Rudy Vazquez: How are hackers actually getting in?

239
00:26:37.060 –> 00:26:46.129
Rudy Vazquez: Right? There’s somebody in Russia that’s, you know, trying to come after me because I’m some important guy, or some important company, or I have the most important information in the world.

240
00:26:47.220 –> 00:26:48.010
Rudy Vazquez: None.

241
00:26:48.410 –> 00:27:02.289
Rudy Vazquez: The way they are breaking in is by using an email, a fake invoice, and a busy Tuesday morning. And this happens to most of us. So, let me walk you guys through 4 more common ways that companies get hit.

242
00:27:03.040 –> 00:27:09.200
Rudy Vazquez: The first one, it’s gonna be that fake invoice. And… This is gonna be from…

243
00:27:09.480 –> 00:27:19.459
Rudy Vazquez: Let’s say, a company that you work normally with, right? Let’s say you’re working with this company, you see the email come in, and it’s an invoice for, I don’t know, 100 bucks.

244
00:27:19.680 –> 00:27:24.529
Rudy Vazquez: Oh, that’s a small invoice. Pay it. It’s 100 bucks, you don’t even get approval from anybody.

245
00:27:24.980 –> 00:27:26.810
Rudy Vazquez: The moment you pay it, though.

246
00:27:27.780 –> 00:27:30.850
Rudy Vazquez: they’re breaking in, right? A lot of times it’s gonna be a link.

247
00:27:31.070 –> 00:27:38.840
Rudy Vazquez: It’s gonna be maybe a password reset that they’re asking you to do, or maybe they’re gonna be asking you to update your information.

248
00:27:39.470 –> 00:27:44.299
Rudy Vazquez: So, the most common way is gonna be through email. It’s gonna be through a fake invoice.

249
00:27:44.510 –> 00:27:54.850
Rudy Vazquez: Number two, it’s gonna be through those fake broker loads, right? And we’ve seen this on the news all the time, where a broker reaches out to you, sets up a load, your driver picks it up.

250
00:27:55.480 –> 00:27:57.110
Rudy Vazquez: And the broker disappears.

251
00:27:58.000 –> 00:28:00.159
Rudy Vazquez: I mean, you’re the one that’s stuck holding the bag.

252
00:28:01.610 –> 00:28:08.869
Rudy Vazquez: The third one is employee impersonation, and you guys tell me if you guys have ever seen this. I’m pretty sure most of you guys have gotten this email.

253
00:28:09.030 –> 00:28:15.800
Rudy Vazquez: And it’s usually from the boss, or the CEO, or the owner of the company.

254
00:28:16.070 –> 00:28:23.279
Rudy Vazquez: And they’re gonna email, let’s say you, Mark, they’re gonna email Mark, and they’re gonna say, hey, Mark, I’m trying to do something special for the company.

255
00:28:23.670 –> 00:28:29.559
Rudy Vazquez: Do me a favor, go out to the convenience store, and buy me 4… $100 gift cards.

256
00:28:29.820 –> 00:28:37.230
Rudy Vazquez: Be sure to send me a picture of the back of the gift card. And then, of course, Mark, I want to reimburse you, so send me a picture of the receipt.

257
00:28:38.130 –> 00:28:40.919
Rudy Vazquez: They’re like, okay. So, there goes Mark.

258
00:28:41.370 –> 00:28:44.230
Rudy Vazquez: Buys a gift card, sends a picture of the receipt.

259
00:28:45.230 –> 00:28:47.420
Rudy Vazquez: And the guy takes off with 400 bucks.

260
00:28:48.150 –> 00:28:53.690
Rudy Vazquez: So, that bad actor, that hacker, just made $400.

261
00:28:54.230 –> 00:29:03.020
Rudy Vazquez: Now, what’s difficult is, as the owner or the president or the CEO of the company is, what do you do now? Do you reimburse the employee?

262
00:29:03.320 –> 00:29:05.190
Rudy Vazquez: And just tell them, hey, don’t do it again.

263
00:29:05.660 –> 00:29:11.449
Rudy Vazquez: Or… do you not reimburse the employee and say, hey, that was… that’s your fault? Like, you should have known better.

264
00:29:12.910 –> 00:29:19.990
Rudy Vazquez: 9 times out of 10, most companies are not providing any kind of cybersecurity training for their employees.

265
00:29:20.220 –> 00:29:22.679
Rudy Vazquez: I know sometimes we think, well, it’s common sense.

266
00:29:22.830 –> 00:29:33.550
Rudy Vazquez: But when it’s, you know, a busy Tuesday morning, you got the phone ringing, your cell phone’s ringing, you got somebody standing at your desk trying to get an answer out of you, and then you’re trying to respond to these emails.

267
00:29:34.000 –> 00:29:35.799
Rudy Vazquez: And they just get overwhelmed.

268
00:29:35.970 –> 00:29:40.860
Rudy Vazquez: So, cybersecurity training for employees, it’s also a really, really big deal.

269
00:29:41.090 –> 00:29:45.540
Rudy Vazquez: And nowadays, it’s super affordable. It’s a couple bucks a month.

270
00:29:46.670 –> 00:30:00.379
Rudy Vazquez: The last one is a fake shipping notices. Have any of you guys gotten those emails, or… they’re text messages now. I’ve also seen them on text messages, where they’re gonna send you a link, and they’re gonna say, hey, I got your package, but I need you to update your address.

271
00:30:00.760 –> 00:30:02.269
Rudy Vazquez: Have you guys seen that before?

272
00:30:04.190 –> 00:30:04.920
Mark Rhea: Yes.

273
00:30:05.790 –> 00:30:10.809
Rudy Vazquez: And it’ll be, like, through an email, or, like I said, now you’re getting them through text message.

274
00:30:10.910 –> 00:30:16.450
Rudy Vazquez: We’re like, hey, UPS here, we have a package for you, undeliverable, click here to update your address.

275
00:30:16.610 –> 00:30:19.300
Rudy Vazquez: And then you click on it, And…

276
00:30:19.460 –> 00:30:25.489
Rudy Vazquez: That installs some sort of malware, or that installs something that keeps track of…

277
00:30:25.930 –> 00:30:29.879
Rudy Vazquez: The, the passwords that you’re entering on your computer.

278
00:30:30.220 –> 00:30:32.499
Rudy Vazquez: So, it’s… it’s super…

279
00:30:33.310 –> 00:30:38.350
Rudy Vazquez: Getting out of control, and the best thing that we can do is train our employees.

280
00:30:38.780 –> 00:30:52.200
Rudy Vazquez: And I think the best analogy that I’ve used before is that if a stranger pulls up, let’s say, to your yard or to your office, right, and they’re in uniform, and they say, hey, give me the master key to your office, or give me the code to your alarm system.

281
00:30:52.470 –> 00:30:58.249
Rudy Vazquez: 10 out of 10, most people are gonna question that. They’re gonna say, wait a minute, who are you? Who sent you? What are you doing here?

282
00:30:59.490 –> 00:31:02.520
Rudy Vazquez: But when that same request comes through email.

283
00:31:03.100 –> 00:31:04.910
Rudy Vazquez: Most people just give it right over.

284
00:31:05.520 –> 00:31:09.840
Rudy Vazquez: So, in a sense, they’re not going after the biggest company.

285
00:31:10.000 –> 00:31:13.669
Rudy Vazquez: They’re going after the company with the weakest fence.

286
00:31:16.250 –> 00:31:17.470
Rudy Vazquez: Does that make sense?

287
00:31:19.390 –> 00:31:20.220
Mark Rhea: Yes.

288
00:31:20.730 –> 00:31:28.180
Rudy Vazquez: I want to share something else, Mark, and I like to do this, this tabletop exercise. Can you guys see this email here on my screen?

289
00:31:29.330 –> 00:31:30.170
Mark Rhea: Yes, I can see it.

290
00:31:30.170 –> 00:31:30.830
Lydia Wommack: Yep.

291
00:31:31.400 –> 00:31:38.669
Rudy Vazquez: Okay, so I like doing this tabletop exercise, I like sharing this, and this kind of shows you,

292
00:31:39.320 –> 00:31:45.989
Rudy Vazquez: the kind of stuff that we see on a day-to-day basis. So, on my screen here, I have 3 emails, right?

293
00:31:46.610 –> 00:31:49.129
Rudy Vazquez: I need your help in picking out which one

294
00:31:49.290 –> 00:31:57.639
Rudy Vazquez: is gonna be the fraudulent one. Which one is a fake email? Which one is the one that’s gonna steal all your credentials?

295
00:31:57.740 –> 00:32:11.770
Rudy Vazquez: Okay? And remember, it’s a Tuesday morning, the phones are ringing, you got several emails to go through, your wife or your husband is calling you your cell phone, you got an employee standing over your desk wanting questions.

296
00:32:11.890 –> 00:32:14.300
Rudy Vazquez: And you have to respond to this email.

297
00:32:14.540 –> 00:32:17.779
Rudy Vazquez: So, this first one, it’s a government compliant notice.

298
00:32:19.910 –> 00:32:21.990
Rudy Vazquez: Take a few seconds to read that.

299
00:32:27.470 –> 00:32:32.460
Rudy Vazquez: And this is from the Federal Motor Carrier Safety Administration, FMCSA.

300
00:32:32.860 –> 00:32:34.540
Rudy Vazquez: So that’s email number one.

301
00:32:38.310 –> 00:32:40.910
Rudy Vazquez: Number 2, this is from Low Pay Settlements.

302
00:32:41.250 –> 00:32:42.859
Rudy Vazquez: Check out this email here.

303
00:32:43.570 –> 00:32:50.360
Rudy Vazquez: On this one, they’re nice enough to include a phone number. In case you have any questions, there’s a phone number there for your convenience.

304
00:32:53.570 –> 00:32:56.710
Rudy Vazquez: And this is about a payment for a load.

305
00:33:03.580 –> 00:33:06.160
Rudy Vazquez: Alright, third and last one.

306
00:33:07.050 –> 00:33:08.390
Rudy Vazquez: We see these a lot.

307
00:33:08.830 –> 00:33:11.980
Rudy Vazquez: ELD mandate. Software Update Alert.

308
00:33:12.340 –> 00:33:14.819
Rudy Vazquez: And this is from a company called Motiv.

309
00:33:15.020 –> 00:33:18.670
Rudy Vazquez: We’re pretty familiar here with Motiv, they’re a pretty large company.

310
00:33:19.930 –> 00:33:24.030
Rudy Vazquez: And this looks like… It’s about a firmware update.

311
00:33:27.950 –> 00:33:30.649
Rudy Vazquez: They were nice enough to include a link, as well.

312
00:33:31.650 –> 00:33:35.480
Rudy Vazquez: And there is a telephone number we can also call.

313
00:33:38.080 –> 00:33:40.580
Rudy Vazquez: Alright, any questions on 1, 2, or 3?

314
00:33:40.580 –> 00:33:42.800
Lydia Wommack: Well, I’m suspicious of everything now, so…

315
00:33:42.800 –> 00:33:48.220
Rudy Vazquez: Alright, so do you guys think it was email number one?

316
00:33:48.390 –> 00:33:51.580
Rudy Vazquez: Email number 2, or email number 3?

317
00:33:51.820 –> 00:33:52.790
Rudy Vazquez: Oh, so…

318
00:33:52.790 –> 00:33:54.449
Lydia Wommack: Between 1 and 3.

319
00:33:54.780 –> 00:33:56.189
Rudy Vazquez: 1 and 3, Mark?

320
00:33:56.190 –> 00:34:00.540
Mark Rhea: I’m gonna say 1A, B, and C. All of the above.

321
00:34:02.260 –> 00:34:07.290
Lydia Wommack: Yeah, so for the first one, FMCSA shouldn’t be from a .NET, it should be from a .gov, right?

322
00:34:07.650 –> 00:34:08.280
Rudy Vazquez: Love it.

323
00:34:08.280 –> 00:34:12.879
Lydia Wommack: And the last one I’m nervous about, because you don’t download things.

324
00:34:12.880 –> 00:34:15.370
Rudy Vazquez: Exactly, exactly.

325
00:34:15.370 –> 00:34:16.820
Lydia Wommack: Maybe Mark’s gotcha.

326
00:34:16.980 –> 00:34:29.839
Rudy Vazquez: Yes, Mark, absolutely. Ding, ding, ding, winner, winner, chicken dinner. You got this. So, it is all of them. All three are fraudulent ones, and these are real emails that we pulled. I call it from the wild, right?

327
00:34:29.840 –> 00:34:30.270
Lydia Wommack: Ugh.

328
00:34:30.270 –> 00:34:41.420
Rudy Vazquez: We pulled these from the wild, they were out there, this tricked people, these compromised networks, they compromised passwords. And so, let’s take a look at this, at this one. Lita, you were so right. Now.

329
00:34:41.690 –> 00:34:43.209
Rudy Vazquez: One thing I want to point out.

330
00:34:43.320 –> 00:34:46.620
Rudy Vazquez: When you look at these emails, it’s kind of like dating, right?

331
00:34:46.880 –> 00:34:48.610
Rudy Vazquez: You’re looking for red flags.

332
00:34:49.310 –> 00:34:50.709
Rudy Vazquez: Too many red flags?

333
00:34:51.300 –> 00:35:07.639
Rudy Vazquez: what is it, swipe left or swipe right? I don’t know. But delete. Too many red flags? Delete. So, that’s what you want to look for when you’re analyzing these emails. So, the first red flag, Lydia, you were so right. Any government email is going to end with a .gov.

334
00:35:08.670 –> 00:35:22.699
Rudy Vazquez: It’s not gonna end with a .net, it’s not gonna end with a .com. Now, they’re gonna be tricky, and they’re gonna put the gov in there somewhere in that email address, but if you look at the very end of that email address, it ends in .net.

335
00:35:23.010 –> 00:35:25.660
Rudy Vazquez: So that’s the very first thing.

336
00:35:25.760 –> 00:35:30.840
Rudy Vazquez: you look at, first red flag. This is a government email, supposedly, but…

337
00:35:31.200 –> 00:35:35.950
Rudy Vazquez: It doesn’t end with a .gov, so first red flag. Number two.

338
00:35:37.180 –> 00:35:40.699
Rudy Vazquez: The FMCSA, they charge for a lot of things.

339
00:35:40.920 –> 00:35:49.379
Rudy Vazquez: But responding to an email is not going to be one of them. So, in this case here, they want to charge you $75.

340
00:35:50.190 –> 00:35:52.310
Rudy Vazquez: Just to respond to this email.

341
00:35:52.440 –> 00:35:56.329
Rudy Vazquez: Right? So they’re saying, well, you gotta respond, pay the 75,

342
00:35:56.810 –> 00:35:59.070
Rudy Vazquez: Click here to, you know, make your payment.

343
00:35:59.280 –> 00:36:01.920
Rudy Vazquez: But do you think they’re really gonna charge you $75?

344
00:36:02.830 –> 00:36:07.330
Rudy Vazquez: – when you put your credit card information, you’re gonna take it for all it’s worth.

345
00:36:07.940 –> 00:36:11.779
Rudy Vazquez: And if you put your Amex in there, that one’s got no limit, and… oof!

346
00:36:12.430 –> 00:36:15.340
Rudy Vazquez: You’re gonna be on the call with customer support for a long time.

347
00:36:16.690 –> 00:36:18.390
Rudy Vazquez: So that’s your secondary flag.

348
00:36:18.630 –> 00:36:24.449
Lydia Wommack: The subject line there said urgent, all caps, and I’d heard that anything that… that…

349
00:36:24.680 –> 00:36:31.989
Lydia Wommack: tries to instill in you a sense of urgency is a caution as well. Is that, you know, just in the subject line there, urgent?

350
00:36:33.100 –> 00:36:36.200
Rudy Vazquez: You read my mind, because a third red flag?

351
00:36:36.410 –> 00:36:41.180
Rudy Vazquez: is artificial urgency, and threads.

352
00:36:41.300 –> 00:36:44.829
Rudy Vazquez: So, the artificial urgency here is

353
00:36:44.950 –> 00:36:52.060
Rudy Vazquez: 48 hours. You have 48 hours. And the threat is suspension of your operating authority.

354
00:36:52.200 –> 00:36:57.890
Rudy Vazquez: Penalties of $16,000 for violation. Out of service for your entire fleet.

355
00:36:58.500 –> 00:37:05.190
Rudy Vazquez: So, the third red flag is always gonna be that… that urgency, that artificial urgency, and those threats.

356
00:37:05.520 –> 00:37:09.729
Rudy Vazquez: So once you put it all together, you’re gonna say, this looks super, super…

357
00:37:09.920 –> 00:37:14.299
Rudy Vazquez: suspicious. So, those are the three red flags in this email.

358
00:37:15.100 –> 00:37:16.610
Rudy Vazquez: On the 2nd.

359
00:37:16.610 –> 00:37:21.489
Mark Rhea: The red flag, the red flag that got my attention was, have your credit card ready.

360
00:37:22.120 –> 00:37:34.290
Rudy Vazquez: Yeah, that’s exactly what it says. Have your credit card ready. And they make it such an easy number, right? 75 bucks process… okay, I can swing that. I’m authorized to pay 75 bucks. You know, I’ll do that.

361
00:37:34.780 –> 00:37:37.410
Rudy Vazquez: And most companies, yeah, it’s 75, you know?

362
00:37:37.740 –> 00:37:49.639
Rudy Vazquez: But, like I said, for a hacker, for somebody that’s living out there in the Philippines, they can run that credit card transaction, pull that money out, and for them, they’re good for another month or two.

363
00:37:52.740 –> 00:37:56.439
Rudy Vazquez: The second one was a freight broker payment notification.

364
00:37:56.970 –> 00:38:08.340
Rudy Vazquez: So, on this one, first red flag is that legitimate brokers and factoring companies, they’re never, or they shouldn’t, right, request bank account changes.

365
00:38:08.760 –> 00:38:10.199
Rudy Vazquez: Through an email link.

366
00:38:11.420 –> 00:38:15.359
Rudy Vazquez: So, any bank account changes, always call them first.

367
00:38:15.710 –> 00:38:21.930
Rudy Vazquez: But… Do not call them at the 1-800 number that’s in the email.

368
00:38:22.850 –> 00:38:25.010
Rudy Vazquez: Call them from a number you know.

369
00:38:25.330 –> 00:38:27.930
Rudy Vazquez: Because if you call him at the number that’s on this email.

370
00:38:28.180 –> 00:38:31.550
Rudy Vazquez: The same guy that wrote this email is the same guy that’s gonna answer that phone.

371
00:38:32.720 –> 00:38:43.799
Rudy Vazquez: So, you’re gonna be talking to the same guy, and of course, he’s gonna try to make it feel legitimate. So, call from a number that you know, call from a number that you’re familiar with. So, if I work with this,

372
00:38:44.120 –> 00:38:50.530
Rudy Vazquez: with this broker consistently, then I should already have a number saved on my cell phone or in my phone directory.

373
00:38:50.980 –> 00:38:56.010
Rudy Vazquez: Number two, it’s gonna be that suspicious domain. So we look at that from.

374
00:38:56.120 –> 00:39:01.510
Rudy Vazquez: Loadpay-freightbilling.com, that’s not a real website, it’s not a real address.

375
00:39:01.680 –> 00:39:03.750
Rudy Vazquez: So, that’s a second red flag.

376
00:39:04.300 –> 00:39:05.510
Rudy Vazquez: Number 3?

377
00:39:06.030 –> 00:39:09.259
Rudy Vazquez: That generic reading. Look at how it just says, hello.

378
00:39:10.170 –> 00:39:17.390
Rudy Vazquez: Nobody will say, hello, Rudy, or hello Mark, or hello, Lydia. In this case, it’s just that generic hello.

379
00:39:17.620 –> 00:39:20.120
Rudy Vazquez: Any idea why they would use a generic hello?

380
00:39:23.740 –> 00:39:25.599
Lydia Wommack: They can send mass emails.

381
00:39:25.600 –> 00:39:32.610
Rudy Vazquez: Yes, that’s absolutely it, because they want to take this email, and there’s only so many Rudies in the world, right?

382
00:39:32.820 –> 00:39:37.219
Rudy Vazquez: So instead of saying hello, Rudy, they’re gonna say hello, because now they can send it to

383
00:39:37.280 –> 00:39:51.709
Rudy Vazquez: 300,000 companies across the U.S, and it’s like sales, right? It’s a numbers game. Eventually, somebody’s gonna answer. Eventually, somebody’s gonna click on that link. So, third red flag? That generic reading. Normally, it’ll have, like, your name, or

384
00:39:51.770 –> 00:39:58.619
Rudy Vazquez: your account number, last four of your account number, something that’s a little bit more familiar to you. But in this case, that generic greeting.

385
00:39:58.950 –> 00:40:00.390
Rudy Vazquez: That’s your darn red flag.

386
00:40:01.870 –> 00:40:03.669
Rudy Vazquez: Let’s take a look at this last one.

387
00:40:04.070 –> 00:40:07.500
Rudy Vazquez: So this is an ELD mandate software update alert.

388
00:40:07.700 –> 00:40:10.769
Rudy Vazquez: So, number one, this is from Motiv.

389
00:40:12.010 –> 00:40:15.210
Rudy Vazquez: First red flag? What if you don’t even have motive?

390
00:40:16.340 –> 00:40:25.740
Rudy Vazquez: Right? A lot of… a lot of employees don’t know. They just know, well, it’s some sort of tablet, or yeah, we have a software. I think I heard about it. I don’t know if we have Motive, but what are they gonna do?

391
00:40:25.880 –> 00:40:27.290
Rudy Vazquez: They’re gonna click on that link.

392
00:40:28.650 –> 00:40:33.810
Rudy Vazquez: So, first red flag, do we even have this software? Do we even use it?

393
00:40:35.040 –> 00:40:40.569
Rudy Vazquez: So, you want to make sure that you’re at least using this tech in your company.

394
00:40:41.210 –> 00:40:45.289
Rudy Vazquez: Number two, it’s asking you to download a file.

395
00:40:45.730 –> 00:40:50.709
Rudy Vazquez: Normally, this is something that your cybersecurity or your IT company has to vet first.

396
00:40:50.870 –> 00:40:56.009
Rudy Vazquez: Right? Get this cleared before then. And technically, this is something that they should be doing.

397
00:40:56.980 –> 00:41:03.590
Rudy Vazquez: So, your dispatch guy, your manager, your accounting people, they shouldn’t be downloading software updates.

398
00:41:04.040 –> 00:41:11.079
Rudy Vazquez: That should be a software update that’s done by cybersecurity or your IT company. So, that’s a second red flag.

399
00:41:11.540 –> 00:41:16.459
Rudy Vazquez: The third red flag, we talked about this earlier, That artificial deadline.

400
00:41:17.100 –> 00:41:19.429
Rudy Vazquez: It’s gotta be done by April 14th.

401
00:41:19.700 –> 00:41:24.170
Rudy Vazquez: If you didn’t do it by Sunday night, you’re gonna be flagged as non-compliant.

402
00:41:24.500 –> 00:41:29.490
Rudy Vazquez: And guess what? You’re gonna get a violation during your next roadside inspection.

403
00:41:30.080 –> 00:41:31.149
Rudy Vazquez: So there’s that.

404
00:41:31.550 –> 00:41:32.790
Rudy Vazquez: artificial.

405
00:41:34.390 –> 00:41:35.660
Rudy Vazquez: deadlines.

406
00:41:37.070 –> 00:41:39.689
Rudy Vazquez: Any questions on these three emails?

407
00:41:40.840 –> 00:41:49.630
Lydia Wommack: No, it’s great exercise. To get tripped up. And now, I think we’re also seeing more, more text.

408
00:41:50.150 –> 00:42:04.649
Lydia Wommack: phishing texts, too, with similar, similar, you know, sense of urgency, link to follow, update your information. I got one the other day from the North Texas Toll NTTA, North Texas Toll Association.

409
00:42:04.690 –> 00:42:06.250
Rudy Vazquez: Yep.

410
00:42:06.710 –> 00:42:08.730
Lydia Wommack: Great exercise, thank you.

411
00:42:08.730 –> 00:42:10.469
Rudy Vazquez: Yeah, I love it. Yeah, you’re welcome.

412
00:42:10.910 –> 00:42:12.580
Rudy Vazquez: Okay, now…

413
00:42:12.990 –> 00:42:25.300
Rudy Vazquez: I want to start going into solutions, right? But before we go into any solutions, I want to just take a quick second to reframe this, and I want to reframe this because a lot of trucking companies, brokerages.

414
00:42:25.640 –> 00:42:33.559
Rudy Vazquez: They think, I’m too small to be a target, or I don’t understand why you would want to hack me, you know? I’m a small guy, I have nothing.

415
00:42:33.850 –> 00:42:46.560
Rudy Vazquez: And the reality of this is that hackers are not sitting in a dark room specifically targeting you, right? It’s not like a Netflix special. And, like I said earlier, what they’re doing is they’re running around with automated tools.

416
00:42:46.820 –> 00:42:56.460
Rudy Vazquez: And those automated tools are scanning thousands of trucking companies. They’re just looking for those open doors. And when that door is open, when you have car doors open, they’re gonna walk right in.

417
00:42:56.620 –> 00:43:02.720
Rudy Vazquez: So, to them, it’s not gonna matter if you’re a 5-truck operation, or you’re a 500-truck fleet.

418
00:43:03.780 –> 00:43:06.870
Rudy Vazquez: So, the ones who don’t get hit aren’t the biggest companies.

419
00:43:07.080 –> 00:43:11.059
Rudy Vazquez: The ones who get hit, Are the ones that have the doors open.

420
00:43:11.570 –> 00:43:12.330
Rudy Vazquez: So…

421
00:43:12.500 –> 00:43:20.190
Rudy Vazquez: This doesn’t require a massive IT budget. All it requires is just some basic discipline, and this is what I want to go into next.

422
00:43:25.150 –> 00:43:43.100
Rudy Vazquez: So, first one, and I think we’ve been told this since the beginning of time, right? Use unique passwords. Stop reusing your passwords. The easy fix to this, to using unique passwords, is get yourself a password manager. Password managers, they cost, like, two, three bucks a month.

423
00:43:43.410 –> 00:43:49.170
Rudy Vazquez: And they work on all your computers, they work on your cell phones, and you can start using complex passwords.

424
00:43:49.800 –> 00:43:58.020
Rudy Vazquez: And the password manager will fill them in for you, so you don’t even have to remember passwords anymore, or unique passwords anymore. You don’t have to remember any of that stuff.

425
00:43:58.280 –> 00:44:01.969
Rudy Vazquez: Number two, Train your team.

426
00:44:02.120 –> 00:44:15.089
Rudy Vazquez: This one is a really, really big one. We need to train our teams so that they know what a phishing email looks like, what a fake text message looks like, what does a scan look like. The trainings…

427
00:44:15.450 –> 00:44:27.110
Rudy Vazquez: 5, 10 bucks a month, if that, and I love them because it allows you to see all the different things that are happening out in the world before they actually happen to you. So that’s a big, big, big one.

428
00:44:28.280 –> 00:44:33.080
Rudy Vazquez: Number three, monitoring your systems. I’ll share this with you guys really quick.

429
00:44:33.310 –> 00:44:35.549
Rudy Vazquez: We get the most calls.

430
00:44:35.850 –> 00:44:42.729
Rudy Vazquez: For service and support for new customers, on Thanksgiving, and New Year’s.

431
00:44:44.020 –> 00:44:47.060
Rudy Vazquez: As a cybersecurity company, those are our busiest days.

432
00:44:47.440 –> 00:44:49.429
Rudy Vazquez: Let me tell you why, what happens.

433
00:44:51.660 –> 00:44:53.299
Rudy Vazquez: When nobody’s watching.

434
00:44:54.200 –> 00:45:01.220
Rudy Vazquez: this… that’s the time that they hit. Mark, remember you were asking me earlier, like, what are they waiting for? Do they wait 1 year, 5 years, 10 years?

435
00:45:01.620 –> 00:45:12.690
Rudy Vazquez: A lot of these, a lot of these outfits, they wait until a long holiday, like Thanksgiving, or New Year’s, where we’re gonna be off for 2, 3, maybe 4 days.

436
00:45:13.470 –> 00:45:17.880
Rudy Vazquez: And when you guys go back to work, All your stuff is encrypted.

437
00:45:18.190 –> 00:45:23.279
Rudy Vazquez: you’re getting this screen that says, pay me 2 Bitcoins, or I’m gonna release all your information.

438
00:45:23.390 –> 00:45:26.100
Rudy Vazquez: Or I’m gonna delete all your information.

439
00:45:26.480 –> 00:45:31.330
Rudy Vazquez: So, it’s all encrypted with a ransomware virus. That’s a really big one.

440
00:45:32.450 –> 00:45:39.820
Rudy Vazquez: So you gotta make sure you have that 24-7 support, 24-7 monitoring, where they’re looking to catch those kind of things.

441
00:45:41.040 –> 00:45:42.050
Rudy Vazquez: Reform?

442
00:45:42.600 –> 00:45:52.949
Rudy Vazquez: Most of us are, like, I call them digital nomads, right? Because we take our laptops, and we can work from anywhere. We can work from the airport, from Starbucks.

443
00:45:53.490 –> 00:45:55.379
Rudy Vazquez: Remotely, from the beach.

444
00:45:55.630 –> 00:45:57.309
Rudy Vazquez: But, a lot of times.

445
00:45:57.560 –> 00:46:11.489
Rudy Vazquez: our access connections are not secure, so we gotta make sure we have a really good VPN, we gotta make sure we have 2FA, we gotta make sure we have MFA. And most other systems, like for MFA and 2FA authentication.

446
00:46:11.700 –> 00:46:19.000
Rudy Vazquez: That’s included for free already in your Microsoft licenses, so most of us are already paying for that. So we gotta make sure we’re using that.

447
00:46:20.590 –> 00:46:21.780
Rudy Vazquez: Number 5?

448
00:46:22.130 –> 00:46:25.530
Rudy Vazquez: backups. This is kind of like number one, right? The passwords?

449
00:46:26.150 –> 00:46:27.910
Rudy Vazquez: You gotta make sure you have backups.

450
00:46:28.160 –> 00:46:30.650
Rudy Vazquez: But… where I see…

451
00:46:30.800 –> 00:46:44.350
Rudy Vazquez: Most companies fail when they hire us for New Year’s or Thanksgiving, right? The first thing I ask is, do you guys have a backup? And they say, oh yeah, yeah, yeah, we got backups. We’ve been paying for these backups for the last 10 years. Like, okay, great.

452
00:46:45.430 –> 00:46:47.909
Rudy Vazquez: When was the last time someone tested their backup?

453
00:46:49.470 –> 00:46:51.680
Rudy Vazquez: Ugh… I don’t know.

454
00:46:52.570 –> 00:46:57.450
Rudy Vazquez: So when we go to restore the backup, when we go to restore their systems, their servers, their TMS,

455
00:46:57.920 –> 00:46:59.429
Rudy Vazquez: The backups fail.

456
00:46:59.620 –> 00:47:04.359
Rudy Vazquez: It’s like, oh my god. Did anybody test them before? Anybody test… validate the backups?

457
00:47:04.840 –> 00:47:06.689
Rudy Vazquez: You know, we didn’t know we had to do that.

458
00:47:07.820 –> 00:47:18.099
Rudy Vazquez: And so, backups is important, yes, but validating those backups is even more important. We gotta make sure we have a validation schedule for our backups.

459
00:47:19.750 –> 00:47:20.819
Rudy Vazquez: Number 6?

460
00:47:21.100 –> 00:47:26.680
Rudy Vazquez: We gotta make sure we have an incident response plan. This is really, really important, because when…

461
00:47:27.490 –> 00:47:30.320
Rudy Vazquez: Things get serious when things go south.

462
00:47:30.440 –> 00:47:32.259
Rudy Vazquez: We gotta know… who are we gonna call?

463
00:47:32.710 –> 00:47:46.429
Rudy Vazquez: And this is why I talked earlier that you gotta make sure that at this stage in the game, you have a really good relationship with your cybersecurity and IT company, because you want to have them on speed dial, you want to call them and say, hey, I need you guys here, like, yesterday, like, come fix this.

464
00:47:46.890 –> 00:47:48.779
Rudy Vazquez: You don’t want to be in the middle of it.

465
00:47:49.300 –> 00:47:55.039
Rudy Vazquez: And say, hey, how much you guys charge to? You don’t want to be doing that.

466
00:47:55.400 –> 00:47:57.600
Rudy Vazquez: Gotta make sure you have that relationship ready.

467
00:47:58.990 –> 00:48:02.379
Rudy Vazquez: Any questions on… 6 things to do.

468
00:48:03.780 –> 00:48:06.079
Mark Rhea: I think you’re dead. You know what?

469
00:48:06.220 –> 00:48:16.920
Mark Rhea: One of the things that’s slapping me in the face is a company has a lot of employees, maybe 100 employees, and to assume that all of your employees

470
00:48:17.550 –> 00:48:24.930
Mark Rhea: Have a working knowledge of the risks of the data breaches and things you’re talking about is, is, is,

471
00:48:25.330 –> 00:48:31.730
Mark Rhea: It’s crazy. There’s no way that they know all these things, and whose responsibility is it?

472
00:48:32.350 –> 00:48:33.419
Mark Rhea: to train them.

473
00:48:34.170 –> 00:48:40.269
Rudy Vazquez: Right. Yep, you’re absolutely right, Mark. And I always like to ask, if you got… if you got hacked today.

474
00:48:40.820 –> 00:48:42.470
Rudy Vazquez: If you got breached?

475
00:48:42.850 –> 00:48:44.910
Rudy Vazquez: Whose job is it to tell you?

476
00:48:45.100 –> 00:48:47.440
Rudy Vazquez: Hey, we just got hacked, we just got breached.

477
00:48:47.700 –> 00:48:48.410
Mark Rhea: Yeah.

478
00:48:48.880 –> 00:48:50.000
Rudy Vazquez: You’ll say?

479
00:48:50.000 –> 00:48:54.440
Lydia Wommack: Since we know in this industry, everybody ends up wearing multiple hats. Right.

480
00:48:54.440 –> 00:49:04.510
Lydia Wommack: If you’re doing safety, you’re probably also HR and recruiting, and IT, and claims management, and you’re probably in a deposition, defending your company, so…

481
00:49:04.510 –> 00:49:19.189
Lydia Wommack: yeah, when do you have the time to catch it? The monitoring sounds really helpful and important. One of the things that jumps out to me here, just from seeing from our service side with our clients is, you know, a lot of the,

482
00:49:19.410 –> 00:49:33.490
Lydia Wommack: struggle with rolling out technology to fleets, it comes with driver adoption, and with just, you know, non-fleet companies. Employee adoption, user adoption. And we… we often hear

483
00:49:33.490 –> 00:49:47.740
Lydia Wommack: fleets ask to reuse the same password that their drivers are already using for their other tech. Just, let’s just keep it simple for them, let’s use the same username and password so they don’t have to remember all that, they can just log in and go.

484
00:49:48.160 –> 00:49:54.949
Lydia Wommack: So that one strikes me as being common, just because I’ve seen it. What do you see on this screen as…

485
00:49:55.190 –> 00:50:01.050
Lydia Wommack: being, you know, the most frequent that you run into, or the most egregious? What’s the biggest issue up here?

486
00:50:01.970 –> 00:50:04.749
Rudy Vazquez: For me, of course, it’s gonna be that training.

487
00:50:04.750 –> 00:50:05.210
Lydia Wommack: Hmm.

488
00:50:05.210 –> 00:50:09.339
Rudy Vazquez: Right? Training your team. And the reason for that is because

489
00:50:09.960 –> 00:50:19.169
Rudy Vazquez: no matter if I sell you the most expensive firewall, the most expensive antivirus, the most expensive gizmo or gadget, right?

490
00:50:19.340 –> 00:50:23.109
Rudy Vazquez: That stuff is gonna protect you if your team has no training.

491
00:50:23.240 –> 00:50:27.489
Rudy Vazquez: If the team lets them in, if the team clicks on that link.

492
00:50:27.850 –> 00:50:31.440
Lydia Wommack: Okay, I didn’t ask to say that, everybody, just to be clear, but thank you.

493
00:50:34.580 –> 00:50:40.480
Lydia Wommack: What kind of training do you… do you think is most effective?

494
00:50:41.920 –> 00:50:53.689
Rudy Vazquez: Well, for us, of course, in our industry, it’s gonna be cybersecurity training, right? So what we’re not… we’re not trying to turn you into an IT guy or an IT gal.

495
00:50:53.690 –> 00:50:54.560
Lydia Wommack: What?

496
00:50:54.720 –> 00:51:01.209
Rudy Vazquez: Most people make the assumption that cybersecurity and IT is the same thing, and no, it’s two separate animals.

497
00:51:01.370 –> 00:51:05.400
Rudy Vazquez: And in the cybersecurity, the reason we want that training is because

498
00:51:05.790 –> 00:51:10.100
Rudy Vazquez: We want you to be exposed to what a fake email looks like.

499
00:51:10.100 –> 00:51:10.730
Lydia Wommack: Right.

500
00:51:11.090 –> 00:51:15.740
Rudy Vazquez: Or even now, the terminology, right? What’s social engineering?

501
00:51:16.380 –> 00:51:17.600
Rudy Vazquez: I don’t know.

502
00:51:17.780 –> 00:51:24.679
Rudy Vazquez: And that’s something that we’ve been seeing a lot. The other day, Lydia, somebody got a email, one of my clients.

503
00:51:24.870 –> 00:51:28.279
Rudy Vazquez: And in that email, it said, hey, it’s AT&T.

504
00:51:28.390 –> 00:51:33.269
Rudy Vazquez: We’re gonna disconnect your service if you don’t pay a $200 fee that you owe.

505
00:51:34.110 –> 00:51:40.830
Rudy Vazquez: So now we start looking at the red flags, right? The urgency, $200, okay, normal, yup, delete.

506
00:51:41.010 –> 00:51:43.160
Rudy Vazquez: But then guess what happened 20 minutes later?

507
00:51:43.550 –> 00:51:44.750
Rudy Vazquez: We got a call.

508
00:51:45.360 –> 00:51:46.720
Lydia Wommack: Oh,

509
00:51:46.720 –> 00:51:54.930
Rudy Vazquez: And they said, hey, I just sent you an email. I’m calling from AT&T, this is your address, are you this company? Yeah, yeah, that’s me. Okay, well…

510
00:51:55.150 –> 00:52:00.489
Rudy Vazquez: You guys have a $200 balance, and we’re gonna shut down your account, and you’re gonna lose internet.

511
00:52:00.920 –> 00:52:08.110
Rudy Vazquez: And you know that if you lose internet, there goes your phone system, there goes your cloud-based truck management system, there goes this, there goes that.

512
00:52:09.010 –> 00:52:10.110
Rudy Vazquez: Luckily.

513
00:52:10.440 –> 00:52:15.229
Rudy Vazquez: This is one of our clients, right? And they had already been through that training, and we had already seen that scam.

514
00:52:15.720 –> 00:52:18.710
Rudy Vazquez: So, they caught it. And then number two.

515
00:52:19.160 –> 00:52:25.940
Rudy Vazquez: They knew that they didn’t have AT&T. Like, we don’t even use the AT&T service. Remember we were talking about earlier, do we even use that tech?

516
00:52:26.180 –> 00:52:29.029
Rudy Vazquez: They knew we didn’t use AT&T, so they, well, clicked.

517
00:52:29.750 –> 00:52:32.660
Rudy Vazquez: hung up on them. But had it been anybody else.

518
00:52:32.870 –> 00:52:33.620
Lydia Wommack: Yep.

519
00:52:33.620 –> 00:52:48.110
Rudy Vazquez: Sure, let me give you my credit card. Like, I don’t want to go through that trouble, you know? And, Lydia, we lost internet, because I didn’t pay those $200. Oh my god, you should have paid it. So, so training is… it’s a really, really big deal, because it can affect us in more ways than one.

520
00:52:49.830 –> 00:52:50.170
Lydia Wommack: Okay.

521
00:52:50.640 –> 00:52:52.099
Lydia Wommack: We’d love to hear that.

522
00:52:52.100 –> 00:52:53.760
Rudy Vazquez: Absolutely.

523
00:52:53.760 –> 00:53:03.590
Lydia Wommack: And I will just go ahead and throw out there that, since it’s a nice, easy segue, we do… we only have one cybersecurity training video at this point. I think it’s an area we could stand to add more.

524
00:53:03.590 –> 00:53:22.519
Lydia Wommack: But fortunately, in the meantime, we also have the ability to upload custom content, and that can be as straightforward as, you know, a PDF or a slideshow. If you want to get wild, you can now, you know, the Microsoft Suite makes it really easy to record a voiceover with a PowerPoint.

525
00:53:22.520 –> 00:53:23.700
Lydia Wommack: And…

526
00:53:23.820 –> 00:53:48.740
Lydia Wommack: you know, phones make it very easy to shoot a quick video, even if that’s just a 3D-looking camera saying, don’t be an idiot, don’t click the link. Short and sweet, direct, but so that is really easy to upload this kind of custom content that’s really important to your business, and especially where you might want to be also adding content to say, hey, as a quick reminder, here are the systems that we do use. If you get an

527
00:53:48.740 –> 00:53:52.320
Lydia Wommack: An urgent message from somebody who isn’t with these systems.

528
00:53:52.670 –> 00:53:54.290
Lydia Wommack: Major red flag.

529
00:53:54.990 –> 00:54:12.889
Rudy Vazquez: And I think what surprises most owners, and I say, and I’m picking kind of owners and CEOs, is that a lot of times they don’t implement systems like this, because they think that the cost is going to be outrageous, right? It’s going to be some cost that, oh my god, it’s out of this world, we can’t afford it.

530
00:54:13.320 –> 00:54:23.720
Rudy Vazquez: And it’s not until they actually start looking at it, or like Mark said earlier, it’s not until something happens that they say, okay, well, let’s take a look at it now. Let’s see, how much does it really cost?

531
00:54:23.720 –> 00:54:24.680
Lydia Wommack: Yeah.

532
00:54:24.680 –> 00:54:25.710
Rudy Vazquez: Yeah, you find out then.

533
00:54:25.840 –> 00:54:41.649
Lydia Wommack: that is common to wait until you’re facing the worst to button yourself up, but… my goodness, it’s like the old ad for insurance. How do you spell an insurance? L-O-E-E, that’s how you spell it, because it’s the gift of yourself and to your family, so same thing, right, Rudy?

534
00:54:41.650 –> 00:54:59.870
Rudy Vazquez: Yeah, yeah, yeah, absolutely. I love that. And this brings me to my last slide, right? And we were talking about this earlier. If you’re a company that hasn’t gotten cybersecurity support, if you’ve never had anybody to kind of hold your hand and guide you through there.

535
00:55:00.340 –> 00:55:04.409
Rudy Vazquez: We’re gonna offer everyone a dark wave scan at no cost.

536
00:55:04.510 –> 00:55:10.010
Rudy Vazquez: And what this dark web scan, what it does, Lydia, is it allows us to search

537
00:55:10.280 –> 00:55:13.160
Rudy Vazquez: To see if your company has ever been breached.

538
00:55:13.450 –> 00:55:15.970
Rudy Vazquez: Either now, or in the past.

539
00:55:16.270 –> 00:55:16.930
Lydia Wommack: Okay.

540
00:55:17.060 –> 00:55:27.130
Rudy Vazquez: And this is really useful because it allows us to make a plan going forward. So, if we scan, you come to us, and you say, hey, Rudy, I’ve never had cybersecurity, I’ve never had IT support.

541
00:55:28.060 –> 00:55:30.070
Rudy Vazquez: Can you look into my company?

542
00:55:30.570 –> 00:55:35.919
Rudy Vazquez: We can do that. We don’t need access to any of your systems, right? I don’t need a credit card, I don’t need none of that stuff.

543
00:55:36.950 –> 00:55:39.079
Mark Rhea: You can… you can hack into it, is that what you’re saying.

544
00:55:39.080 –> 00:55:45.149
Rudy Vazquez: We’re not gonna hack into it. All we just need to know is your company name.

545
00:55:45.370 –> 00:55:49.469
Rudy Vazquez: And that’s good enough for us to do a search. 9 times out of 10,

546
00:55:49.730 –> 00:55:58.569
Rudy Vazquez: we find something, and I said, oh, here’s, here’s usernames, here’s passwords, here’s the truck management system that you’re using.

547
00:55:59.020 –> 00:56:03.720
Rudy Vazquez: You guys have been breached since 2008, since 2012, and they’re like, oh my god.

548
00:56:03.960 –> 00:56:10.200
Rudy Vazquez: What do we do now? The worst ones, Lydia, are the ones where the breach is still active.

549
00:56:10.670 –> 00:56:11.380
Lydia Wommack: Okay.

550
00:56:12.140 –> 00:56:17.790
Rudy Vazquez: Where, hey, up until 2026, I’m still seeing things Populating our tools.

551
00:56:18.010 –> 00:56:25.129
Rudy Vazquez: Wow. It’s like, oh, what do we do now? And then we can start having a conversation of, you know, how we can protect you. Terrified.

552
00:56:25.130 –> 00:56:39.999
Lydia Wommack: You know what, this is… this is the thing that people need, because you can’t fix a problem you don’t know about. And it’s scary to find out, you know, it’s really… it’s the same thing with medical stuff. Oh, I don’t want to go get the scan, I don’t want to find out I have something wrong, and…

553
00:56:40.050 –> 00:56:46.979
Lydia Wommack: You gotta know, because you can’t fix what you don’t know about. So, let’s be… look in the mirror, be honest with ourselves, look in… have Rudy look in the dark web.

554
00:56:47.380 –> 00:56:49.820
Lydia Wommack: Nobody go out on your own and look in the dark web.

555
00:56:49.820 –> 00:56:59.140
Rudy Vazquez: Yep, but you’re totally right, right? I don’t want to go to the doctor. I’m afraid what they’re gonna find. But, like you said, you just gotta go. And if you already have.

556
00:56:59.960 –> 00:57:06.460
Rudy Vazquez: a cybersecurity company, if you already have IT support, this dark web scan, it’s a great way to validate.

557
00:57:06.630 –> 00:57:07.580
Lydia Wommack: Yes.

558
00:57:07.970 –> 00:57:09.310
Rudy Vazquez: What you’re paying for.

559
00:57:09.310 –> 00:57:09.790
Lydia Wommack: Yep.

560
00:57:09.790 –> 00:57:13.189
Rudy Vazquez: Right? So you can say, hey, Rudy, we’re super secure, we’re super safe.

561
00:57:13.980 –> 00:57:20.839
Rudy Vazquez: But, give me that warm and fuzzy feeling and tell me that we aren’t, and then we can say, yeah, I didn’t find anything. Like, you guys are great.

562
00:57:21.350 –> 00:57:22.230
Rudy Vazquez: So what?

563
00:57:22.230 –> 00:57:26.330
Lydia Wommack: Everyone who’s on today experiences that, the warm and fuzzy, but…

564
00:57:26.330 –> 00:57:28.170
Rudy Vazquez: Yes.

565
00:57:28.170 –> 00:57:47.890
Lydia Wommack: This is amazing, thank you. What we’re going to do, because we recorded this, so we’re going to share the replay with everyone who joined and anyone who couldn’t join, and we’ll make sure and spread the word far and wide, and we’ll include also your information so that everyone can take you up on that, because that’s a really fantastic offering.

566
00:57:47.970 –> 00:57:49.549
Lydia Wommack: Rudy, thank you!

567
00:57:49.740 –> 00:57:53.660
Rudy Vazquez: Yeah, it’s been a pleasure, you guys were awesome, and I really enjoyed this. Thank you so much.

568
00:57:53.660 –> 00:57:58.320
Lydia Wommack: we’re sufficiently terrified, but at least we have an action plan, so… Yes.

569
00:57:58.320 –> 00:58:08.969
Mark Rhea: We invest so much time and energy and resources on, you know, crash frequencies and all the things, the bad things that can happen to a truck rolling down the road.

570
00:58:09.340 –> 00:58:16.670
Mark Rhea: And there’s a lot of data out there, and there’s a lot of data thiefs out there, and it’s its own, I guess.

571
00:58:16.820 –> 00:58:19.519
Mark Rhea: It’s on the industry these days, is that a fair statement?

572
00:58:20.180 –> 00:58:20.690
Rudy Vazquez: Yep.

573
00:58:21.010 –> 00:58:21.950
Rudy Vazquez: Absolutely.

574
00:58:22.690 –> 00:58:28.539
Mark Rhea: So, this was an eye-opener for me. I very much appreciate it, Rudy.

575
00:58:29.660 –> 00:58:54.499
Lydia Wommack: Well, everyone, thank you. We’ll follow up over email with all the things, and we’ll also include, if you are a Certified Director of Safety through the NAPME program, and you need a certificate of attendance today for your continuing education credits, we’ll include a link for that, too, or you can pop it in chat, say, I want one, and we’ll send it over. But, everyone, thank you so much. Rudy, thank you, Mark, always a pleasure.

576
00:58:54.500 –> 00:58:56.630
Lydia Wommack: And we’ll see you next time on the webinars!

577
00:58:56.970 –> 00:58:57.860
Rudy Vazquez: Bye, everyone!

578
00:58:57.860 –> 00:58:58.520
Lydia Wommack: Thanks.

579
00:58:58.520 –> 00:58:59.600
Mark Rhea: Thank you, Rudy.