Publicly disclosed information for this event

Index Number:

Title:

2022_025

Several websites of the US Maritime Transportation System are spoofed in order to operate [...]

Day	Month	Year	Country	Activity	Incident Type
25	March	2022	United States	Port	Spearphishing

Summary

Several websites of the US Maritime Transportation System are spoofed in order to operate cyberattacks on customers.

Victim

N/A

Claimed/Reported Threat Actor

N/A

Origin

Cybercrime

Main impact

Integrity

References

https://www.dco.uscg.mil/Portals/9/Maritime%20Cyber%20Alert%2001-22%20TLP%20WHITE.pdf

Recommendations to Port to reduce Spearphishing risks:

Implement advanced email filtering systems to detect and block spearphishing emails.
Educate employees about the dangers of spearphishing and how to identify suspicious emails.
Enforce strict email access controls and authentication measures.
Implement organizational measures to avoid scam.
Limit the use of social networks or unallowed medias for professional activities.
Monitor for unusual email activity, such as unexpected login attempts.
Work with your CSIRT organization to know the Tactics, Techniques and Procedures used.

Previous Next

Disclaimer: the data are provided as is. France Cyber Maritime and the M-CERT take no responsibility for the soundness, quality, precision, nor the eventual attribution made by the referenced URLs. We give a lot of respect and support to the victims of attacks.

Files generated on Monday, 11th December 2023.
ADMIRAL is licensed under the Creative Commons