The NJCCIC receives reports of impersonation scams in which threat actors research their target and pretend to be trusted sources, such as legitimate businesses, banks, and officials from government agencies or entities including the Federal Bureau of Investigation (FBI).
Cybercriminals often take advantage of specific times of the year and with tax season underway, they are quick to launch social engineering campaigns conducted via email, phone, and SMS text messages to seek out your tax information. Read for tips on how to protect against this scam.
The NJCCIC detected an uptick in TOAD (or telephone-oriented attack delivery) phishing campaigns which is a type of social engineering attack that lures potential victims to contact fraudulent call centers managed by threat actors in attempts to steal credentials.
As Valentine’s Day approaches, cyber criminals attempt to prey on individuals seeking companionship or romance. They use social engineering tactics to lure their victims via email, text message, chat and video chat apps. Read this article to learn how to protect against this.
NJCCIC analysts identified an aggressive phishing campaign targeting several NJ State agencies that regularly communicate with law firms. The phishing email’s subject line claims to reference various types of legal documents such as settlements or reviews.
Qbot is a banking trojan allowing threat actors to access compromised systems, steal information and log keystrokes, and install additional malware or ransomware. Qbot targets NJ state workers with fake emails aiming to steal data and deploy ransomware.
The NJCCIC observed a phishing campaign targeting New Jersey contractors and claiming to be from the US Department of Transportation. The sender email address and attached links are not from official “.gov” domains. Read this article to learn more about this scam.
Hackers launched a Zoom phishing campaign distributing IcedID malware via a fake website dubbed "explorezoom[.]com." The website tricked users into downloading a disguised IcedID installer disguised as a legitimate Zoom application. Read to learn on how to spot these scams.
In 2022, attackers targeted old, unpatched software vulnerabilities. This article explains the most exploited vulnerabilities and offers mitigation strategies for both software creators and users. Reading it will equip you with knowledge to strengthen your cyber defenses.
