In recent times, cybersecurity threats have escalated as hackers continue to evolve their techniques to infiltrate sensitive data; one such alarming trend is the rise of fake email attacks, specifically aimed at targeting civil and military officials. These attacks employ deceptive tactics, enticing users to download malware-laden In-page attachments, leading to potential data breaches. The Cabinet Division has issued an advisory to tackle this escalating menace, emphasizing the need for heightened vigilance and security measures.
Identifying the Sophisticated Fake Email Attacks
Government agencies have detected an alarming increase in phishing emails targeting senior civil and military officials. The hackers behind these attacks are often identified as Hostile Intelligence Agencies (HIAs), seeking to exploit In-page’s known vulnerabilities. Upon opening the malicious In-page attachment, the victim’s system becomes vulnerable to the execution of the malware, which gains access to sensitive data. The malware exfiltrates this data to a Command & Control (C&C) server, putting the country’s security at risk.
Strengthening Cybersecurity Measures
To counter the growing threat, the Cabinet Division has taken several proactive measures. Firstly, a malicious C&C server was promptly blocked on the national gateway. Additionally, IT administrators have been instructed to blacklist the email ID “[email protected]” and the malicious C&C server on local firewalls and email servers.
In addressing the risks associated with In-page usage, the advisory recommends using Microsoft Word with Urdu Language or Word Press Processor as safer alternative. In cases where In-page usage is unavoidable, users are urged to opt for the latest and paid version to minimize potential vulnerabilities. The advisory explicitly discourages downloading free or cracked versions of In-page, which can expose users to additional risks.
Cabinet’s Advisory Against Scams
The advisory emphasizes user education and responsible online practices. It urges users to refrain from sharing personal information with suspicious individuals, websites, or applications and to exercise caution while clicking on unknown links and attachments. To fortify defense against malware, users are advised to employ built-in antivirus software and conduct document scans before opening any files.
Lastly, the advisory underlines the importance of securing critical data by keeping it offline and maintaining regular backups on external drives or standalone systems. Practicing stringent password policies is also encouraged, with the recommendation of using separate and complex passwords for each system, mobile device, social media accounts, financial platforms, and email accounts.
Also read: Cabinet Division Warns of Hackers Stealing Data via Fake Emails Targeting Government Employees
