Phishing emails remain a top social engineering tactic for cybercriminals. These emails may request recipients open an attachment, click a link, provide account credentials, transfer funds, or disclose sensitive information. This article shows samples and critical warning signs.
The NJCCIC received reports of targeted, well-crafted phishing emails claiming to be from financial institutions, specifically Citizens Bank. In the above example, the sender’s display name impersonates Citizens Bank to convey legitimacy. Click to learn more.
The NJCCIC received reports of a phishing campaign with Aetna-themed lures attempting to deliver malware. The sender’s display name impersonates the managed healthcare company to appear legitimate, and the sender’s email address contains innocent keywords.
MOVEit is file transfer software that enables file transfers. This article explains the New Jersey Cybersecurity & Communications Integration Cell vulnerability warning discovered in the software that could allow an attacker to install programs; view, change, or delete data, and more.
The NJCCIC received reports of a spear phishing campaign targeting the education subsector and masquerading as New Jersey State Compliance training. A compromised email account of a district employee was used to send fake training compliance notifications.
A vulnerability in Google Chrome could allow hackers to execute arbitrary code on affected systems, potentially taking control of computers and accessing sensitive data. The article outlines the risks and essential mitigation measures to protect against this threat.
The NJCCIC received reports of gift card scams attempting to steal personally identifiable information (PII) or extort funds by impersonating trusted entities, such as a CEO or fellow employee, through email, SMS text messaging, and phone calls, to initiate fraudulent requests.
NJ state employees targeted by fake "Email Security Notification" phishing emails. These emails were impersonating the NJ Office of the Attorney General. Read this article to learn how to spot email spoofing and protect your login credentials and data.
Groundbreaking OpenAI products such as Whisper and ChatGPT have become very popular. Cybercriminals developed phishing scams to capitalize on Chat GPT's popularity. The NJCCIC reported a newly created YouTube channel, "OpenAI Live," attempting to scam users.
The NJCCIC observed phishing campaigns claiming to be from the Better Business Bureau (BBB) and targeting business owners in an attempt to deliver Ursnif data-stealing malware to potentially gain remote access, exfiltrate data, and deploy ransomware.
