As we prepare for the Roar Event, please stay vigilant about your belongings. keep wallets, ID cards, and devices in a front pocket or secure bag. Be cautious when using public Wi-Fi at the event, use your own mobile data if possible and refrain from discussing work matters in public. By staying mindful of these precautions, we can enjoy the event and avoid potential problems.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Cybersecurity researchers have warned about a new phishing attack that uses corrupted Microsoft Office files and ZIP archives to bypass email security. According to ANY.RUN, this attack evades antivirus software, prevents files from being analyzed in secure environments (like sandboxes), and gets past Outlook's spam filters, allowing harmful emails to reach your inbox. The attack involves sending emails with intentionally damaged attachments, such as ZIP files or Office documents, which are designed to avoid detection by security tools and trick users into opening them with fake promises of employee benefits or bonuses.

Source: https://thehackernews.com/2024/12/hackers-use-corrupted-zips-and-office.html

Always exercise caution when scanning QR codes, especially those received via email, text, or from unfamiliar sources. Cybercriminals often use QR codes to direct you to malicious websites that could steal your personal information or infect your device with malware. Before scanning, ensure the source is trusted, and whenever possible, verify the URL to ensure its legitimate. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Use the 3-Way Backup Method to safeguard your files:

1. External Hard Drive – Physical backup
2. Cloud Storage – Access anywhere
3. USB Drives – Extra copies

Key Tips:

• Frequent Updates – Backup regularly
• Test Restorations – Ensure backups work
• Encrypt Sensitive Files – Add extra security

Optional: Local Backups – Use a secondary internal drive.

Stay safe with this reliable strategy!

While using "Remember Me" features may be convenient, they can expose your accounts to unauthorized access, especially on shared devices. In rare cases, data breaches could allow attackers to extract stored login information. To enhance security, use a password manager, enable MFA, and always log out after use to protect your accounts.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

During the holiday season, "free giveaways" and contests on social media are common, but they can be traps set by cybercriminals to steal your personal information or install malware. Always verify the legitimacy of any contest before participating. Check the account’s credibility, look for signs of suspicious activity, and avoid sharing sensitive details like passwords or credit card numbers. When in doubt, skip the contest and report it if necessary to protect yourself and others. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Scammers often send fake holiday gift cards or discount offers, hoping to lure you into a trap. Be skeptical of unsolicited vouchers or deals that seem too good to be true. Always verify the authenticity of any offers by checking with the official retailer or brand before clicking on links or providing personal information.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Scammers often fake shipping or delivery messages to trick you into clicking harmful links. To stay safe, always verify tracking numbers directly through the official website of the retailer or courier service. If the notification seems suspicious, don’t click any links—go to the source directly instead. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

The North Korea-linked hacker group Sapphire Sleet is believed to have stolen over $10 million in cryptocurrency through social engineering attacks over six months. Microsoft found that multiple North Korean groups were using fake LinkedIn profiles, posing as recruiters or job seekers to scam people and fund the regime.

Active since at least 2020, Sapphire Sleet shares ties with other hacking groups like APT38 and BlueNoroff. In November 2023, Microsoft revealed the group set up fake skills assessment sites to further their scams.

For more than a year, Sapphire Sleet has used a common trick: pretending to be a venture capitalist interested in a target's company. Victims invited to online meetings are shown fake error messages, which prompt them to contact support, leading to further exploitation.

Source: November 27, 2024 16:09 (on 11/28/24) |  0 | 1 minute read

When you're out and about, avoid charging your device at public USB ports or unknown outlets, as they could be used to secretly install harmful software or steal your personal data. To protect yourself, always use your own charger or carry a portable power bank to keep your device safe. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.