The NJCCIC observed a campaign sending multiple messages impersonating legal notices. These messages make claims such as a fine will be issued, identity needs to be verified, or compliance has failed. When users click the message's “Open” button, they are directed to...
A botnet is a network or collection of internet-connected devices that have been infected with malware and are controlled remotely by threat actors. These devices include servers, routers, webcams, DVRs, smart TVs, set-top boxes, smart light bulbs, and other internet-connected equipment.
The NJCCIC continues to receive reports of phishing campaigns that utilize social engineering tactics, exploit compromised accounts, and abuse trusted, legitimate platforms to harvest account credentials or install malware. In one campaign, threat actors send Google notifications...
There has been a massive increase in the availability, variety, and adoption of Cybercrime-as-a-Service (CaaS) tools. These services offer potential bad actors a low-cost, low-barrier entry into cybercrime by providing rentable, user-friendly tools and infrastructure for launching cyberattacks.
The NJCCIC observed an increase in phishing campaigns impersonating copyright infringement notices for media shared on the Meta platform. The notices appear to be sent by Meta or its legal counsel and threaten action, such as account deletion, if the media is not removed or a response...
The NJCCIC received reports of another retirement benefits meeting phishing campaign targeting pension plan members, including New Jersey teachers. Cyber threat actors use social engineering tactics to initiate contact by email. The subject line includes the target...
The NJCCIC observed an increase in phishing emails claiming to provide updated employee compensation records, often implying a base pay increase. In one instance, the messages included an Adobe PDF attachment with a QR code that directed users to a counterfeit...
The NJCCIC was informed of a phishing campaign impersonating Zoho with the subject line "New sign-in from an unverified location." The email is sent from "Zoho Team" and contains a link to "Review Account Activity." This link, as well as the URL below it, directs users to a webpage...
The NJCCIC identified a campaign that mimics Amazon Prime membership renewal notices. These messages claim the current payment method on file is invalid and set a short deadline for renewal. Although the email’s display name appears as “Prime Notification,”...
There is a lot of discussion about how artificial intelligence (AI) is impacting cyber threats and cybersecurity. The most immediate and wide-reaching impact for the everyday person is social engineering. Social engineering is the act of manipulating, deceiving, or tricking individuals into...
