Alerts and Advisories
Alerts & Advisories
HOAX ALERT: Vaccine Feedback Call WhatsApp Message
19 Jul 2021
A WhatsApp message is now making its rounds claiming that phones will get hacked if the victim answers the call and follows the instruction given. The message, believed to originate from India, informs about receiving a call from the number “912250041117” for vaccine feedback and upon pressing 1, the phone will be blocked and hacked.
PrintNightmare Bug
4 Jul 2021
Known vulnerabilities in Windows Print Spooler service can allow a total compromise of Windows systems. The print spooler is an executable file that manages the printing process. Management of printing involves retrieving the location of the correct printer driver, loading that driver, spooling high-level function calls into a print job, scheduling the print job for printing, and so on.
Nobelium cyberattacks targeting IT and government organizations
29 Jun 2021
Hacking group Nobelium which has caused concern for a lot of companies all over the world due to its ongoing malicious activity and sophisticated phishing attacks, is once again targeting IT and government organizations in various countries.
Online Gambling Scam Messages
25 May 2021
Irresponsible party has been spreading messages via SMS throughout the country which eventually auto add a user to an online gambling WhatsApp group once the link provided is clicked. An example of the message "Tahniah Anda Kena Random Bonus. Anda Akan Dpt Antara 20%-200%. Top Up Utk Aktifkan Bonus Anda. Click to Claim: bit.ly/xxxx. Cepat claim dalam 24 jam".
“MariSewaBank” Scam
9 Apr 2021
BruCERT has recently received a number of reports on a scam called “MARISEWABANK”. The scammer contacts victims via SMS containing a WhatsApp link. Once the link is clicked, the victim would be lured into online gambling by promising a profit of 100% to 350% depending on the bank that the victim deposits their money into.
Tele-survey Scam
7 Apr 2021
BruCERT has received several complaints recently about a tele-survey phone scam allegedly from a company named Prolific, asking people for their personal email address purportedly to send a survey through email. However, the real purpose is to collect sensitive and personal information.
Hacked Email Account: What to do and how to prevent it
12 Mar 2021
According to a study, 91% of cyber-attacks start with an email. Scammers hack email accounts so that they can send messages from a trusted email address in hopes of getting the recipients to take action. Their main goal is to get these email contacts to send money, reveal personal information, or click on a link that installs malware, spyware, or a virus.
Human Error in Cyber Security
4 Mar 2021
Making mistakes is a core of the human experience – it is how we learn and grow. In Cyber Security, human mistakes are often overlooked. In a security context, human error means unintentional actions – or lack of action – by employees and users that cause, spread or allow a security breach to take place. The weakest link is non-IT personnel as their actions might become an attack vector for the attacker.
Ransom DDoS Attacks
29 Jan 2021
Ransomware groups are now using DDoS attacks as a negotiation tactic to increase pressure on victims who do not cooperate in paying the ransom. This "Triple Extortion" strategy has recently been used by ransomware operators SunCrypt, RagnarLocker, and Avaddon.