A vulnerability has been discovered in Check Point Security Gateway Products that could allow for credential access. A Check Point Security Gateway sits between an organization’s environment and the Internet to enforce policy and block threats and malware.
The NJCCIC continues to observe social engineering schemes targeting individuals seeking employment, often referred to as job scams. Increases in layoffs and job cuts exacerbate this issue; layoffs in the financial sector alone increased in the first quarter of 2023.
In May 2023, Google launched several new top-level domains (TLDs), including .ZIP. The use of .ZIP for filename extensions and domain names is legitimate; however, threat actors are exploiting the .ZIP domain name in a new phishing technique called “file archiver in the browser.”
FortiSIEM is a multi-tenant SIEM that offers user awareness for threat detection, analysis, and reporting. Vulnerabilities have been discovered which could allow for remote code execution. An attacker could then install programs; view, change, or delete data; or create new accounts.
The NJCCIC recently observed a text message phishing campaign in which threat actors attempted to steal users’ banking credentials and payment card details. Information about this campaign can be found in the video embedded in the NJCCIC post. Click to learn more.
Throughout 2023, researchers discovered 10 new trojans targeting Android devices and 19 banking malware families that had persisted since 2022. These malware families targeted banking apps across 61 countries, primarily targeting traditional banking apps.
Multiple vulnerabilities have been found in Apple products, the most severe of which could allow for arbitrary code execution. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Read to learn how to protect against this.
Multiple vulnerabilities have been found in Microsoft products, the most severe of which could allow for remote code execution in the context of the logged on user. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The NJCCIC’s email security solution detected a new LockBit campaign dubbed LockBit Black. This campaign was also reported to the NJCCIC via incident reports and observed by information-sharing and analysis centers. The emails in this campaign contain malicious ZIP attachments.
The FBI released this Private Industry Notification (PIN) to highlight cybercriminals using phishing and Short Message Service (SMS) phishing (SMiShing) against employees at US retail corporate offices in order to create fraudulent gift cards resulting in financial loss.
