To: All Users

Ransomware attacks are one of the most common types of cyber attacks in recent years. Attackers use various network intrusion techniques or methods such as impersonation and fraud to deploy ransomware programs to organizations and users, encrypt the data on the infected computer system, so that the affected systems will not be able to operate normally, and extort money and other economic benefits from the victims. At the same time, some attackers also steal data during the process and threaten victims with disclosure of confidential data to increase the likelihood of the victims compromising.

The following security measures can prevent ransomware attacks:

1. Beware of phishing and virus emails, do not casually open attachments or web links:
   Attackers will send phishing emails with malicious program attachments or web links. Once you open, your computer system will be infected;

2. Beware of social engineering, do not trust strangers or people with unverified identities:
   They will impersonate government officials, customer service, bank staff, etc., and induce you to download or install unknown software, or even assist them in carrying out ransomware attacks;

3. Install antivirus software, turn on real-time protection and monitoring functions:
   Whether the ransomware program is spread via portable data storage devices (such as USB, mobile hard drives, etc.) or emails, the real-time protection function of antivirus software can effectively intercept the ransomware program when it is installed or executed;

4. Regularly update software, keep antivirus software up to date:
   This can prevent attackers from exploiting existing software vulnerabilities for attacks. At the same time, the latest antivirus software feature database can  detect effectively and intercept suspicious software programs;

5. Protect your user password, activate multi-factor authentication services and use strong passwords:
   They will use leaked accounts or brute force cracking techniques to remotely log into your computer system and install ransomware programs;

6. Regularly backup data to ensure that files can be restored from backups:
   Even if data is encrypted, it can be restored from backups, which will reduce the chance of data loss.

Reference

• How to download and install software in a secure manner?
• Are you ready to prevent Ransomware?
• Beware of Spear Phishing
  

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Google have recently issued security vulnerability about Chrome browser.  This vulnerability may trigger privilege escalation, remote execution of arbitrary code and denial of service, which is widely exploited.

• Please update to Google Chrome version 117.0.5938.132 (Windows, Mac and Linux) or later.

For more details, please refer to: https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html

Steps to update Google Chrome browser

• Open your Google Chrome browser on your desktop.
• Click the three vertical dots in the upper right corner to open the dropdown menu.
• Select “Settings“.
• Click “About Chrome” on the left-hand sidebar.
• Chrome will automatically check for updates or you can click the button “Update Google Chrome”.
• Restart the Chrome.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

• What is Spear Phishing Attack?

Spear Phishing is a specific type of Phishing Attack that targets individuals or organizations with the intention of deceiving them and gaining unauthorized access to sensitive information. Unlike regular phishing attacks, spear phishing is more personalized and involves tactics such as impersonation, enticing bait, and finding ways to bypass security measures like email filters and antivirus software.

Although general Phishing and Spear Phishing employ similar techniques, there are distinctions between them. General Phishing attacks are typically straightforward, aiming to acquire the victim’s information, such as online banking credentials, to fulfill their objectives. In contrast, spear phishing attacks go beyond simply obtaining login details or personal data. They serve as a gateway for attackers to gain initial entry into the targeted network and act as a stepping stone for subsequent Targeted Attacks

• How does Spear Phishing Work?

Spear phishing attacks specifically aim at targeting individuals within an organization or institution, including their social media accounts like the organization’s website, Twitter, Facebook, and LinkedIn. The attackers invest time in creating persuasive email content and may include harmful attachments or links in the emails. When the recipient opens such attachments or clicks on the links, it can trigger the execution of malicious code or redirect the user to a compromised website. This provides an opportunity for the attacker to establish a hidden communication network and advance to the next stage of the attack.

• How to Prevent Spear Phishing?

To thwart spear phishing attacks, UM employs several layers of protection, empowering system administrators with enhanced visibility and control over the network. This approach minimizes the risk of targeted attacks and mitigates various attack vectors.

Nonetheless, the most pivotal factor in defense lies in the information security awareness of employees and students. By diligently observing spelling mistakes, peculiar language, and other suspicious indicators in emails, individuals can partially shield themselves against spear phishing attacks.

Reference

• Important Notice: Beware of phishing emails sent by UM members
• Don’t Let a Phishing Scam Reel You In
• How can I identify a phishing, fake email and websites?
• Beware of Phishing Trap

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

There has been a recent emergence of phishing emails impersonating university staff members. Hackers are using fraudulent email addresses to send urgent emails to colleagues or students, pretending to need immediate assistance. Their intention is to deceive recipients into responding and then carry out subsequent fraudulent activities, such as money scams or attempts to obtain account passwords.

Figure 1: Desktop Version

Figure 2: Mobile Version

If you have suspicions, try to contact the sender through other reliable means for further verification, such as phone calls or text message.

Please DO NOT RESPOND to this kind of emails or provide any information to the impersonating sender. If you have any further queries, please feel free to contact our Help Desk.

Reference

• Don’t Let a Phishing Scam Reel You In
• How can I identify a phishing, fake email and websites?
• Beware of Phishing Trap

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Google have recently issued security vulnerability about Chrome browser.  This vulnerability may trigger remote execution of arbitrary code and is widely exploited.

• Please update to Google Chrome version 116.0.5845.187 (Linux) or later, 116.0.5845.187 (Mac) or later, 116.0.5845.187/.188 (Windows) or later.

For more details, please refer to: https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html

Steps to update Google Chrome browser

• Open your Google Chrome browser on your desktop.
• Click the three vertical dots in the upper right corner to open the dropdown menu.
• Select “Settings“.
• Click “About Chrome” on the left-hand sidebar.
• Chrome will automatically check for updates or you can click the button “Update Google Chrome”.
• Restart the Chrome.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), multiple security vulnerabilities has been issued about the code editing software Notepad++.  Attackers can use this vulnerability to induce users to open malicious documents to execute the arbitrary code and the related exploited code has been exploded.

• Please update to Notepad++ V8.5.7 or later.

For more details, please refer to: https://notepad-plus-plus.org/downloads/v8.5.7/

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

Recently, there have been reports of scammers using artificial intelligence (AI) deep fake technique for fraudulent activities, including creating fake news to promote investment schemes or manipulating videos to impersonate celebrities and deceive victims into participation of false investment activities. It is also possible that scammers may use similar techniques to impersonate your friends or family members during video conferences or voice calls for phishing scams.

There are few steps to protect yourself from phishing scams:

1. Stay vigilant and calm:
   • Keep composure when dealing with urgent requests, especially those involving financial transactions or investment request. Be particularly cautious if someone claiming to be a “friend” requesting money transfer in the video or audio recording.
2. Verify identities:
   • When it comes to financial transactions or personal information, always verify the identity of the other party. Confirm the identities of the friends, family, or relevant institutions through independent channels and the authenticity of their requests.
3. Watch for inconsistencies:
   • Attempt to verify the other party’s identity through casual conversation, as scammers may reveal inconsistencies.
4. Protect personal information:
   •  Besides personal data, do not provide biometric data such as facial recognition, fingerprints, or voice samples.
5. Don’t blindly trust online information:
   • This includes messages labeled as “Fact Checked” or “Confirmed.” If you suspect it to be false information, avoid sharing it and consult the relevant authorities for verification.

Although criminals may change their fraudulent methods from time to time, their goal remains the same: to deceive users into revealing their account credentials, personal information, or money. By staying vigilant and remembering to “Stop and Think! Do Fact Check!”, you can protect yourself from phishing scams.

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), some public departments have received counterfeit phishing emails related to “Notice of the Ministry of Finance’s 2023 Individual Labor Application”, which contain links to phishing website attempting to defraud bank card numbers and other information.

• The title of the email is “Please Check!”, which contains a QR code (Figure 1) linking to phishing website. After scanning the QR code, it will direct you to the phishing website (Figure 2).

  Figure 1: Phishing email content

Figure 2: Phishing website

Suggestions

• If you received similar email, do not visit the relevant phishing website and delete the email immediately.
• Do not open suspicious email attachments or links and provides confidential information such as account passwords in suspicious website.
• If you have received similar emails, please contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

When you are no longer using personal IT devices, such as a computer, smartphone, tablet or external storage device, it is important on how you dispose of it properly. This helps to protect your privacy and security, as well as the environment.

There are few steps you can dispose of your personal IT equipment securely:

1. Back up your data:
   • Before disposing of your device, make sure to back up all your important data and files. You can use an external hard drive or cloud storage to store your data.
2. Unsubscribe or unbundle accounts:
   • If there are any subscription services or bundled accounts, you should first unsubscribe or log out of all bundled accounts.
3. Wipe content from your device:
   • Make sure to wipe your device clean before disposing of it. This means deleting all your personal data and files from the device.
4. Remove SIM cards and memory cards:
   • If your device has a SIM card or memory card, make sure to remove them before disposing of the device.
5. Destroy the device (if necessary):
   • If you have sensitive data on your device that you don’t want anyone else to access, you can destroy the device physically.
6. Recycle the device:
   • Once you confirm your device is wiped, you can recycle it through your local recycling company or organization, such as Direcção dos Serviços de Protecção Ambiental (DSPA) in Macau, which is promoting Electronic and Electrical Equipment Recycling Programme.
7. Don’t forget those household appliances:
   • Such as TV boxes, TVs or portable game consoles, etc., which may contain credit card and personal information,  make sure to handle them carefully.

No matter how you choose to dispose of your personal IT equipment, make sure to do so in a responsible way.

Reference:
Electronic and Electrical Equipment Recycling Programme (DSPA)
How to Properly Prepare Your PC for Disposal
How to factory reset your iPhone, iPad, or iPod touch
Reset your Android device to factory settings

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office