Monday, November 18, 2024

Malware Via Snail Mail

Receiving malware through physical mail, delivered to your postbox on a piece of paper, might seem unusual. However, it has happened in Switzerland, and there's no reason to think it couldn't happen in your country as well.

Cybercriminals have sent physical letters containing QR codes that link to malicious software. These letters falsely claim to offer a new weather app from MeteoSwiss (the official meteorological service of Switzerland) but actually contain a QR code leading to a malicious app created by cybercriminals. Such attacks using QR codes are known as 'QR-phishing' or 'quishing'."


https://bit.ly/4fzRQJs


"...These letters are fake and have been sent by fraudsters who are trying to load malware onto mobile phones.


The letter asks the recipients to install a new severe weather app. However, there is no such federal app with the name mentioned. Rather, the QR code shown in the letter leads to the download of malware called ‘Coper’ (also known as ‘Octo2’). When the supposed ‘Severe Weather Warning App’ is installed, the malware attempts to steal sensitive data such as access data from over 383 smartphone apps, including e-banking apps.


The malware only affects smartphones that run on the Android operating system..." 

Wednesday, November 6, 2024

San Joaquin County Superior Court Cyber Attack

 

Another cyber incident about JoIP (Justice over IP).

But first recall this:

https://bit.ly/40FHQK5


Cybercriminals can target any system connected to the internet, regardless of its importance or sensitivity. From personal devices to critical infrastructure, no system is immune, including justice systems which rely on an IT infrastructure.


Last week, a cyberattack disrupted operations at a California (USA) court, causing technological outages


A pressing concern can arise among the public at this point: If cybercriminals can breach court systems, could they also manipulate critical legal documents?


Well... The answer is not easy to tell. While the exact extent of potential damage is difficult to assess, it is clear that such attacks pose a serious threat to the integrity of the justice system.


https://bit.ly/3CavMGg


"The attack knocked out all of the court’s phone and fax services, websites containing juror reporting instructions, the e-filing platform, credit card payment processing and more. Some jurors scheduled for this week were excused."


"The attack comes just months after the Los Angeles County Superior Court system was hit with a ransomware attack that caused identical issues for weeks..."


"Government bodies across California continue to face an unprecedented wave of cyberattacks affecting city, county and state-level services. On Thursday (31.10.2024), the Housing Authority of the City of Los Angeles confirmed it is facing its second major cyberattack in the last two years."