Navigation section
phishing
-
Windows 10 Cautions Email Scam...
Hi Today I have received two email messages one ostensibly from Amazon and one from Microsoft. Both names you think you can trust, both were fake invoices for things I haven't purchased. Both invoices are in the same format and are obviously from the same sender. I copied the first one and...- MikeHawthorne
- Thread
- amazon bogus invoices cybersecurity email scam fraud microsoft online safety phishing scam awareness windows defender
- Replies: 3
- Forum: Windows Help and Support
-
AA20-302A: Ransomware Activity Targeting the Healthcare and Public Health Sector
Original release date: October 28, 2020 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 7 framework. See the ATT&CK for Enterprise version 7 for all referenced threat actor tactics and techniques. This joint cybersecurity advisory...- News
- Thread
- cisa continuity plans cyber threats cybersecurity data protection data theft encryption fbi healthcare incident response malware mitigation network security phishing public health ransomware ryuk threat detection trickbot user awareness
- Replies: 0
- Forum: Security Alerts
-
AA20-301A: North Korean Advanced Persistent Threat Focus: Kimsuky
Original release date: October 27, 2020 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 7 framework. See the ATT&CK for Enterprise version 7 for all referenced threat actor tactics and techniques. This joint cybersecurity advisory...- News
- Thread
- apt attack tactics command and control credential harvesting cyber threats cybersecurity data exfiltration espionage hidden cobra incident response keylogger kimsuky malware mitre att&ck north korea phishing security recommendations spearphishing threat intelligence
- Replies: 0
- Forum: Security Alerts
-
VIDEO ICYMI – Recapping Microsoft Edge at Ignite 2020
October is National Cybersecurity Awareness month (NCSAM) and it couldn’t be more timely. Vulnerability to online threats is literally top of mind for everybody. In a Link Removed, 90% of respondents (yes, you read that right) indicated that phishing attacks have impacted their organizations...- News
- Thread
- app configuration browser security byod cybersecurity data loss prevention data security digital events endpoint protection ignite 2020 it professionals malware microsoft 365 microsoft edge modernization phishing remote work security awareness smartscreen video content work from home
- Replies: 0
- Forum: Live RSS Feeds
-
AA20-280A: Emotet Malware
Original release date: October 6, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. This product was written by the Cybersecurity and...- News
- Thread
- antivirus brute force cisa cybersecurity data exfiltration detection email security emotet lateral movement malicious software malware mitigation mitre network security payload phishing phishing email ransomware threat trojan
- Replies: 1
- Forum: Security Alerts
-
AA20-275A: Potential for China Cyber Response to Heightened U.S.–China Tensions
Original release date: October 1, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. In light of heightened tensions between the United States and...- News
- Thread
- apt china cisa critical infrastructure cyber threats cybersecurity data breach economic espionage espionage incident response intellectual property malware mitigations mitre att&ck phishing software vulnerability threat intelligence ttps us relations vulnerability
- Replies: 0
- Forum: Security Alerts
-
AA20-266A: LokiBot Malware
Original release date: September 22, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise frameworks for all referenced threat actor techniques. This product was written by the Cybersecurity and...- News
- Thread
- android trojan att&ck backdoor cisa credential theft cybersecurity exfiltration incident response information theft keylogger lokibot malspam malware mitigation password theft phishing spearphishing threat detection windows security
- Replies: 0
- Forum: Security Alerts
-
F
Windows 10 Urgent: Potential Facebook Account Deletion Scam Alert!
I received a message this morning that my Facebook account is scheduled for deletion today. I am assuming this is some sort of scan as they wanted me to log in to fb and give info- Please verify your recent account activity & confirm this deletion request to proceed. Anyone?- Fenway16
- Thread
- account activity deletion facebook fraud internet phishing scam security verification
- Replies: 3
- Forum: Windows Help and Support
-
AA20-227A: Phishing Emails Used to Deploy KONNI Malware
Original release date: August 14, 2020 Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. The Cybersecurity and Infrastructure Security Agency (CISA)...- News
- Thread
- antivirus cisa command execution command shell cybersecurity data exfiltration email security keylogging konni malware mitigation mitre att&ck phishing remote access security best practices threat detection user awareness vba windows
- Replies: 0
- Forum: Security Alerts
-
AA20-225A: Malicious Cyber Actor Spoofing COVID-19 Loan Relief Webpage via Phishing Emails
Original release date: August 12, 2020 Summary The Cybersecurity and Infrastructure Security Agency (CISA) is currently tracking an unknown malicious cyber actor who is spoofing the Small Business Administration (SBA) COVID-19 loan relief webpage via phishing emails. These emails include a...- News
- Thread
- antivirus best practices cisa covid-19 credential theft cybersecurity email security federal security indicators links low trust malicious actor malware mitigations phishing remote attacks sba threats vulnerability
- Replies: 0
- Forum: Security Alerts
-
Windows 10 Scam Alert, this just happened!!!
Hi Guys I was just going through my emails and I saw one marked "Prime Alert". The message said... Unfortunately, we were unable to process your Amazon Prime membership payment. But don't worry, it's easy to solve & We are here to help! Your payment failed for the following reason: Declined...- MikeHawthorne
- Thread
- amazon antivirus cyber threats cybersecurity digital scams email security fraud detection fraudulent emails malware membership payments online safety payment issues phishing prime benefits scam alert scam prevention security tips user experience user warning
- Replies: 6
- Forum: Windows Help and Support
-
AA20-182A: EINSTEIN Data Trends – 30-day Lookback
Original release date: June 30, 2020 Summary Cybersecurity and Infrastructure Security Agency (CISA) analysts have compiled the top detection signatures that have been the most active over the month of May in our national Intrusion Detection System (IDS), known as EINSTEIN. This information is...- News
- Thread
- antivirus cisa cryptocurrency miner cybersecurity einstein ids kovter malware mitigation strategies netsupport network security phishing rat remote access tool security updates situational awareness snort signatures threat detection xmrig
- Replies: 0
- Forum: Security Alerts
-
AA20-073A: Enterprise VPN Security
Original release date: March 13, 2020 | Last revised: April 15, 2020 Summary As organizations prepare for possible impacts of Coronavirus Disease 2019 (COVID-19), many may consider alternate workplace options for their employees. Remote work options—or telework—require an enterprise virtual...- News
- Thread
- access control bandwidth management cisa recommendations cybersecurity enterprise vpn incident response it infrastructure multi-factor auth nist guidelines phishing remote work risk mitigation security software patches telework vulnerability
- Replies: 0
- Forum: Security Alerts
-
AA20-099A: COVID-19 Exploited by Malicious Cyber Actors
Original release date: April 8, 2020 Summary This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC). This alert provides information on...- News
- Thread
- apt cisa compromise covid-19 credential theft cybersecurity email security indicators malicious actors malware mitigation ncsc phishing ransomware remote access scams teleconferencing teleworking vpn
- Replies: 0
- Forum: Security Alerts
-
AA20-099A: COVID-19 Exploited by Malicious Cyber Actors
Original release date: April 8, 2020 Summary This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC). This alert provides information on...- News
- Thread
- apt groups cisa covid-19 credential theft cyber attacks cybersecurity exploitation indicators of compromise malicious software malware mitigation ncsc phishing ransomware remote access scams teleconferencing teleworking vpn
- Replies: 0
- Forum: Security Alerts
-
AA20-073A: Enterprise VPN Security
Original release date: March 13, 2020 Summary As organizations prepare for possible impacts of Coronavirus Disease 2019 (COVID-19), many may consider alternate workplace options for their employees. Remote work options—or telework—require an enterprise virtual private network (VPN) solution to...- News
- Thread
- access authentication cisa connections cybersecurity incident response infrastructure it security malware mfa mitigation nist patching phishing remote work security telework updates vpn vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
VIDEO AA20-049A: Ransomware Impacting Pipeline Operations
Original release date: February 18, 2020 Summary Note: This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK™) framework. See the MITRE ATT&CK for Enterprise and Link Removed frameworks for all referenced threat actor techniques and mitigations. CISA...- News
- Thread
- cisa control systems cybersecurity data backup data integrity emergency response hmi incident response infrastructure it network loss of productivity mitigation network segmentation operational technology ot network phishing pipeline security ransomware spearphishing threat actor
- Replies: 0
- Forum: Security Alerts
-
Protect Yourself from Phishing: Essential Tips and Resources
Phishing is one of the easiest and most common tactics cyber criminals use to complete their objectives whatever it may be. Most people have received one or more phishing attacks and the amount sent to people is staggering. They can come as text messages, phone calls, email, advertisements on...- Neemobeer
- Thread
- awareness phishing security
- Replies: 0
- Forum: Windows Security
-
AA20-006A: Potential for Iranian Cyber Response to U.S. Military Strike in Baghdad
Original release date: January 6, 2020 Summary The Cybersecurity and Infrastructure Security Agency (CISA) is sharing the following information with the cybersecurity community as a primer for assisting in the protection of our Nation’s critical infrastructure in light of the current tensions...- News
- Thread
- apt techniques cisa cisa recommendations critical infrastructure cyber defense cyber threats cybersecurity data theft ddos attacks incident response iranian cyber irgc malware mitigation strategies network monitoring phishing security best practices threat intelligence user training vulnerability management
- Replies: 0
- Forum: Security Alerts
-
AA19-339A: Dridex Malware
Original release date: December 5, 2019 Summary This Alert is the result of recent collaboration between the Department of the Treasury Financial Sector Cyber Information Group (CIG) and the Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) to identify and share...- News
- Thread
- bots cisa cybersecurity data breach dridex exploits financial fincen indicators of compromise intrusion detection intrusion prevention malspam malware mitigation phishing privacy ransomware security best practices trojan vulnerabilities
- Replies: 0
- Forum: Security Alerts