Back Sustainability / Cibersecurity Cibersecurity Our digital strategy Cibersecurity is one of the fundamental pillars of our digital strategy. As a leading company in the engineering and construction sector, Técnicas Reunidas is committed to offering quality services that meet the highest standards of cybersecurity and compliance, both for its clients and for its employees and partners. To this end, it has a team of cybersecurity experts who are constantly working to defend against the threats and risks that exist in the digital environment, using the best practices and tools available. Therefore, we want to help our partners identify potential threats and make our relationship even more robust and secure. Most common threats Typosquatting Typosquatting is a technique that is used by cyber criminals and consists on register domain names very similar to a legit one, and use these domains to scam users by sending emails with this domains, or by create a similar website to the legit one and use it to steal credentials. Some examples related with Técnicas Reunidas are: tecnicasreNUIdas.es Recnicasreunidas.es tecnicasreunidas.eU General Security Advice In this section you will find general advice relating to Information Security provided by TR: If you received an email from Tecnicas Reunidas always check that the domain of the email address is ok (usually tecnicasreunidas.es), and check if the domain of the email address is included in the section Detected domains that can be used to scam to avoid getting scammed. If you are a supplier or collaborator and you suspect that you are a victim of phishing and you provide any user and password, follow the next steps: Try to change your password on all the TR platforms that you work on. Contact your IT team to let them know about the issue and follow their instructions. Contact us by email on isd@tecnicasreunidas.es giving us information to investigate the issue, and to put measures, like adding the used domain on the list of current scam domains. Tecnicas Reunidas usually does not ask you for any username or password via email unless you have an issue with one of our services, and in this case, the person that contact you will call you via Teams and ask you for putting the password to perform tests, instead of asking for your password by email. Técnicas Reunidas will never ask you for a wire transfer, Paypal or Crypto payment to get a job with us. Suggestions for IT Departments of companies that are/will work with us: Check frequently the list Detected domains that can be used to scam and blacklist them on your firewall and systems. If one user from your organization is comprised by a phishing campaign is good practice to analyze their computer with your AV software to prevent any further issue. If possible active SPF filter on your email gateway. Try to perform awareness campaigns about cyber security in your company, mostly to train your crew to detect phishing campaigns and how to act against them.
