As hurricanes and other natural disasters feel their presence, the Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning urging individuals to be on high alert for potential malicious cyber activities.
The agency highlights the increased risk of fraudulent emails and social media messages that often follow in the wake of major natural disasters.
CISA warns that cybercriminals frequently exploit the chaos surrounding natural disasters by sending out fraudulent emails and social media messages.
These communications often contain malicious links or attachments to compromise personal information or devices. The agency advises extreme caution when handling emails with hurricane-related subject lines, attachments, or hyperlinks.
Analyse Any Suspicious Links Using ANY.RUN’s New Safe Browsing Tool: Try for Free
Additionally, users should be skeptical of social media pleas, texts, or door-to-door solicitations related to severe weather events.
CISA emphasizes the importance of verifying hurricane-related guidance from trusted sources to avoid falling victim to scams.
Individuals are encouraged to rely on information from local officials and reputable disaster response organizations, such as the Federal Emergency Management Agency (FEMA) and DHS’s Ready.gov.
By ensuring that information comes from credible sources, individuals can protect themselves from fraudulent schemes designed to exploit their vulnerability during these times.
CISA recommends several resources to help individuals avoid disaster-related scams. The Federal Trade Commission offers guidance on staying alert to scams and advice on charitable giving.
The Consumer Financial Protection Bureau provides information on frauds and scams, while FEMA offers disaster fraud guidance.
Additionally, CISA’s phishing guidance can help organizations reduce the likelihood and impact of successful phishing attacks by stopping the attack cycle at its initial phase.
Upgrade Your Cybersecurity Skills With 100+ Premium Cyber Security Courses Online - Enroll Here
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…