Phishing campaign impersonates email alerts from US homeland security dept

News by Bradley Barth

The email campaign uses a spoofed email address to appear like a National Cyber Awareness System alert and lure targeted recipients into downloading malware through a malicious attachment

An ongoing email-based phishing scam is attempting to fool recipients into opening malicious attachments disguised as notifications from the US Department of Homeland Security (DHS), according to the US Cybersecurity and Infrastructure Security Agency (CISA), in a warning posted on the official US-CERT web site this week.

"The email campaign uses a spoofed email address to appear like a National Cyber Awareness System (NCAS) alert and lure targeted recipients into downloading malware through a malicious attachment," the CISA statement says. CISA, whose parent agency is DHS, also notes that it never sends NCAS notifications containing email attachments.

To protect against this and other social engineering attacks, CISA is advising users and administrators to beware of unsolicited emails, even when the sender appears to be known, and exercise caution with links and attachments. Email recipients are also advised to verify the sender’s web address and search the internet for the main website of the organisation referenced in the email.

Sherban Naum, SVP of Corporate Strategy and Technology for Bromium.

"We live in an interconnected digital economy, one where businesses are increasingly vulnerable to online attacks that target users, the traditional ‘weak link’ in cybersecurity. The rise of convincing phishing campaigns like those purporting to be from the DHS brings the problem into sharp focus," said Sherban Naum, SVP of corporate strategy and technology for Bromium, in emailed comments. Naum recommends that organisations defend themselves by adopting a defense in depth security strategy, because "We can’t continue to put the onus of security on users and expect them to spot these threats…"

This article was originally published on SC Media US.

Find this article useful?

Get more great articles like this in your inbox every lunchtime

Video and interviews

Interview - Everyone has an Achilles heel: The new security paradigm

How can we defend networks now that the perimeter has all but disappeared?
Brought to you in partnership with ExtraHop