To: All Users

“Quishing” or “QR code phishing” is a type of phishing attack. When a user scans the QR code, he/she will then access the phishing website. Since a QR code is an image, current security measures may not be able to detect it as a threat. “Quishing” may therefore become a new normal in the future.

Safety Tips of Using QR code:

1. Mobile payment:
   • Verify the information carefully in the mobile app before making any payment in any transaction with QR code. After transaction, verify the transaction details sent by the bank or mobile payment service provider immediately.
   • Do not share or disclose the QR codes generated by mobile payment services to others.
     
2. Website redirection:
   • Stay alert before scanning QR codes and do not scan any codes from unknown sources.
   • Turn off the QR code scanner’s automatic URL redirection function. Once you turn it off, the scanner will show the URL content and request you to confirm if to open the URL or not.
3. Account login:
   
   • Only scan account authentication QR codes in the official websites.
   • Contact the service providers immediately for any unusual login records

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Apple recently issued security update notifications for multiple vulnerabilities, three zero-day vulnerabilities CVE-2023-32434, CVE-2023-32435 and CVE-2023-32439 are widely exploited. These vulnerabilities are related to the Kernel and WebKit components, which could lead to arbitrary code execution.

Vulnerability Details

1. Apple Kernel privilege escalation vulnerability (CVE-2023-32434)
   Apple Kernel has an integer overflow vulnerability that could be exploited by local application to execute arbitrary code with kernel privileges.
2. Apple WebKit arbitrary code execution vulnerability (CVE-2023-32435 and CVE-2023-32439)
   Apple WebKit has the vulnerability that could cause memory corruption and type confusion, when the WebKit component runs maliciously crafted web content, the hacker could execute arbitrary code on the target device.

Affected Product Versions:

Safari < 16.5.1
iOS 16.5.1 and iPadOS < 16.5.1
iOS 15.7.7 and iPadOS < 15.7.7
macOS Ventura < 13.4.1
macOS Monterey < 12.6.7
macOS Big Sur < 11.7.8
watchOS < 9.5.2
watchOS < 8.8.1

Related references:

https://support.apple.com/kb/HT213816

https://support.apple.com/kb/HT213814

https://support.apple.com/kb/HT213811

https://support.apple.com/kb/HT213813

https://support.apple.com/kb/HT213810

https://support.apple.com/kb/HT213809

https://support.apple.com/kb/HT213812

https://support.apple.com/kb/HT213808

Recommendations

If the above affected products are being used, it is recommended to:

• schedule testing and install security updates released by Apple as soon as possible;
• backup and test your work before update.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

Security updates and vulnerability patches are important because they ensure that your device is protected from various threats, and attackers constantly seek new vulnerabilities to exploit with new technologies. Therefore, software on your device needs to be updated regularly to maintain security and prevent attackers from exploiting known vulnerabilities to attack your computer and network devices or steal sensitive information.

Here are several ways to ensure that your device has the latest security updates and vulnerability patches:

• Develop good habits: Before installing updates or changing settings, please read the installation instructions and precautions provided by the vendor, and perform data backup as well.
• Check for updates manually on a regular basis:
  • Choose an appropriate time to update your devices manually to avoid disrupting your work or other activities.
  • If you need to work outside, it is recommended to perform necessary updates in advance using your company or home network to avoid the risk of intrusion on public networks or incurring high data charges when using mobile data.
• Enable automatic updates: Automatic updates can make up for the shortcomings of manual updates and improve security as well.
• Download software only from trusted sources: Only download software and applications from trusted vendors to avoid downloading malware or malicious programs.
• Update all software and applications: Not just the operating system, but all applications and software should be updated, including web browsers, antivirus software, and more.
• Update hardware firmware: Do not overlook home network devices such as home routers, network-attached storage (NAS), smart homes, and home surveillance cameras, etc.
• Don’t ignore small updates: Do not ignore minor updates as they may also contain critical security updates and vulnerability patches.
• Stay aware of vulnerability disclosures: Pay attention to whether there are known security vulnerabilities in your devices and software, and respond and patch them in a timely manner

Security updates and vulnerability patches are important to protect your devices and data. Regularly checking and installing updates and patches is one of the best ways to ensure that your device is protected from various threats. If you have any questions, you can consult your service or product vendor.

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Google have recently issued multiple security vulnerabilities about Chrome browser, among which the (CVE-2023-2136) vulnerability has been exploited . Attackers can use this vulnerability to induce users to open malicious links and execute the remote code. 

Related vulnerabilities

• CVE-2023-2133 & CVE-2023-2134

An out-of-bounds read vulnerability exists in the Server Worker API component. 

• CVE-2023-2135

A use-after-free vulnerability in DevTools component.

• CVE-2023-2136

An integer overflow vulnerability in Skia component.

• CVE-2023-2137

A heap-based buffer overflow vulnerability in Sqlite component.

Affected Products:

• Google Chrome version lower than 112.0.5615.137

For more details, please refer to: https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html

Mitigation
If the above-mentioned affected products are being used, please update the Google Chrome browser as soon as possible.

Steps to update Google Chrome browser

• Open your Google Chrome browser on your desktop.
• Click the three vertical dots in the upper right corner to open the dropdown menu.
• Select “Settings“.
• Click “About Chrome” on the left-hand sidebar.
• Chrome will automatically check for updates or you can click the button “Update Google Chrome”.
• Restart the Chrome.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Google have recently issued a zero-day security vulnerability notice about Chrome that has been wildly used. Attackers can use this vulnerability to trigger the execution of arbitrary code on the target system and unauthorized access to sensitive information. 

Related vulnerabilities

• CVE-2023-2033

A type confusion vulnerability in Google Chrome’s V8  JavaScript engine.

Affected Products:

• Google Chrome version lower than 112.0.5615.121

For more details, please refer to: https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_14.html

Mitigation
If the above-mentioned affected products are being used, please update the Google Chrome browser as soon as possible.

Steps to update Google Chrome browser

• Open your Google Chrome browser on your desktop.
• Click the three vertical dots in the upper right corner to open the dropdown menu.
• Select “Settings“.
• Click “About Chrome” on the left-hand sidebar.
• Chrome will automatically check for updates or you can click the button “Update Google Chrome”.
• Restart the Chrome.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

Screen sharing features refer to the function of sharing your computer screen or mobile screen with others during online meetings or remote work. This function can facilitate communication and collaboration, but it also poses some cyber security risks that may make you a target of scammers or hackers. According to a notice from the Judiciary Police, this function is also a tool for phone scammers.

Scammers may pretend to be government officials, customer service representatives, or bank employees, claiming to assist you with online video call investigation, problem solving, account updating, benefit claiming and so on. Then, they ask you to download unknown applications (APPs) or share your screen with them, and instruct you to input personal information, bank account passwords, verification codes, transfer money, etc. In fact, once you share your screen with them, they can see what you type and may also install malicious software, steal your data and control your device without your knowledge.  

To prevent above risks, here are some information security tips:

• Do not share your screen with strangers or people whose identity you have not verified;
• Do not click on suspicious links or open suspicious attachments;
• Do not download or install applications (APPs) or software from unknown sources;
• Do not turn on screen sharing features or input confidential data when using public WiFi;
• Choose a reputable software or platform with data encryption function to share your screen;
• Only share the necessary content when sharing your screen, and monitor the scope and duration of the sharing;
• End the meeting and log out of the software or platform immediately after sharing your screen.

Remember to stay alert and be careful when using screen sharing features and do not let yourself to become a victim of scams.

Reference

Judiciary Police – Police Information Circular
Know social engineering and beware of phone scams
How to download and install software in a secure manner?

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

In recent years, we have heard frequent warnings to beware of scams through various channels, but phone scams continue to happen. In fact, scammers use “social engineering” to obtain personal information, sensitive data, or conduct fraud. Social engineering is the use of psychology and interpersonal relationship skills to exploit human emotions such as curiosity, fear, and trust. Scammers often impersonate others, such as bank clerks, police, government officials, or court personnel, or pretend to be relatives or friends, to trick victims into providing personal information or transferring money, in order to achieve illegal profits. 

To prevent to be the victim of the phone scams, here are some tips:

• Stay alert: Scammers will use the above techniques to impersonate others to commit fraud. Therefore, don’t easily trust the identity of the caller and verify their identity through official channels.
• Pay attention to language expressions: Fraud calls often threaten or intimidate victims. Stay calm and pay attention to the caller’s language and accent. If there is any question, you may discuss with family and friends or seek help from relevant institutions.
• Do not disclose personal information easily: Just as “don’t flaunt your wealth,” personal information should also be kept confidential, such as bank card numbers, passwords, and ID numbers. If you need to provide such information, do this through secure and reliable methods.
• Do not easily transfer the money: When a call related to funds is received, do not easily transfer the money. Verify the identity and information of the caller through official channels and ensure the security of the transaction.
• Enhance security awareness: Pay more attention to security information and enhance your ability to identify and prevent fraud. If you notice any suspicious activity, contact the authorities to prevent being scammed.
• Share security information with family members: It is also important to increase the security awareness of the family members, as scammers may use social engineering techniques to deceive or trick them into revealing personal information. Scammers may also use this information to impersonate a family member and carry out fraud activities.

In conclusion, preventing phone scam requires sharp vigilance, enhancing security awareness, not easily disclosing personal information or transferring money, and verifying the identity and information of the caller through official channels. Be cautious about anything about funds, in order to prevent losses.

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Microsoft Corporation have recently released the security update for February that includes 77 vulnerability updates, which 9 of them are serious. Therefore, it is recommended to update the affected products as soon as possible. The released update mainly covers the following components: Windows and Windows components, Office and Office components, 3D Builder, Windows iSCSI, Microsoft Exchange Server, SQL Server, .NET and Visual Studio, Azure, Windows Defender and other products.

Special Attention for the following Vulnerabilities:

• Windows Graphics Components Remote Code Execution Vulnerabilities (CVE-2023-21823)

Attackers who successfully exploited this vulnerability could get the system privileges. Microsoft Corporation has detected that this vulnerability has been exploited.

For more details: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21823

• Microsoft Publisher Security Feature Bypass Vulnerabilities (CVE-2023-21715)

Attackers tricked targeted users to download and execute a special file, and successfully exploit it to bypass Office macro policies that block untrusted or malicious files. Microsoft Corporation has detected that this vulnerability has been exploited.

For more details: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21715

• Windows Common Log File System Driver Privilege Escalation Vulnerability (CVE-2023-23376)

Attackers who successfully exploited this vulnerability could get the system privileges. Microsoft Corporation has detected that this vulnerability has been exploited.

For more details: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-23376

• Microsoft Exchange Server Remote Code Execution Vulnerabilities (CVE-2023-21529, CVE-2023-21706, CVE-2023-21707)

This vulnerability could allow remote attackers to execute arbitrary code on a vulnerable server through network calls.

For more details:

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21529

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21706

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21707

• Microsoft Protected Extensible Authentication Protocol Remote Code Execution Vulnerabilities (CVE-2023-21689, CVE-2023-21690, CVE-2023-21692)

The vulnerability exists in the Protected Extensible Authentication Protocol (PEAP) server component, which is used to establish secure connections with wireless clients. Successful exploitation of the vulnerability could allow remote and unauthenticated attackers to execute arbitrary code. The target must be running Network Policy Server and configured with a network policy that allows PEAP to be vulnerable.

For more details:

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21689

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21690

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21692

Microsoft February Security Updates

For more details: https://msrc.microsoft.com/update-guide/releaseNote/2023-Feb

Mitigation
If the above-mentioned affected products are being used, please install the secure updates released by Microsoft Corporation as soon as possible.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Google have recently issued a security vulnerability notice about Chrome. Attackers can use this vulnerability to trigger the execution of arbitrary code on the target system. There are signs that related vulnerabilities have been exploited recently. Please be reminded to to update as soon as possible. 

Related vulnerabilities

• CVE-2023-0696

Due to the type confusion vulnerability in Google Chrome’s V8 engine, attackers can perform corruption through HTML pages.

• CVE-2023-0697

Due to faulty implementation of full-screen mode in Android version of Google Chrome, attackers could trick security mechanisms with HTML pages.

• CVE-2023-0698

Due to the out-of-bounds read vulnerability in WebRTC in Google Chrome, attackers can perform out-of-bounds memory read through HTML page.

• CVE-2023-0699

Due to the Use-After-Free  weakness in the GPU in Google Chrome, attackers can perform corruption through HTML pages and browser shutdowns.

• CVE-2023-0700

Due to improper implementation of Google Chrome when downloading, attackers can use HTML pages to spoof the content of the URL bar.

• CVE-2023-0701

Due to the buffer overflow vulnerability in Web UI in Google Chrome, attackers can perform corruption by convincing the victim to participate in a specific UI interaction.

• CVE-2023-0702

Due to the type confusion weakness in data transfer in Google Chrome, attackers can perform corruption by tricking victims to participate in specific UI interactions.

• CVE-2023-0703

Due to the type confusion weakness in DevTools in Google Chrome, attackers can perform corruption by tricking victims to participate in specific UI interactions.

• CVE-2023-0704

Due to the poor policy enforcement in DevTools  in Google Chrome, attackers can bypass the same-origin policy and proxy settings through HTML pages.

• CVE-2023-0705

Due to integer overflow vulnerability in the core of Google Chrome, attackers can perform corruption via HTML pages.

Affected Products:

• Google Chrome version lower than 110.0.5481.77 (Linux and Mac) and 110.0.5481.77./78 (Windows)

For more details, please refer to: https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html

Mitigation
If the above-mentioned affected products are being used, please update the Google Chrome as soon as possible.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office

To: All Users

As informed by the Cybersecurity Incident Alert and Response Centre (CARIC), Adobe have recently issued a security vulnerability notice about Adobe Acrobat and Acrobat Reader. Attackers can use this vulnerability to trigger the execution of arbitrary code on the target system. There are signs that related vulnerabilities have been exploited recently. Please be reminded to to update as soon as possible. 

Related vulnerabilities

Exploiting the weakness after memory reuse (CWE-416), attackers will create malicious documents and induce victims to open, which will trigger the arbitrary code execution attacks (CVE-2023-201608).

Affected Products:

• Acrobat DC and Scrobat Reader DC: 22.003.20282 (Win), 22.003.20281 (Mac) and previous versions
• Acrobat 2020 and Acrobat Reader 2020: 20.005.30418 and previous versions

For more details, please refer to: https://helpx.adobe.com/security/products/acrobat/apsb23-01.html

Mitigation
If the above-mentioned affected products are being used, please install the security updates released by Adobe as soon as possible and avoid opening any suspicious files.

Reference

• How to download and install software in a secure manner?
• Basic Knowledge of Online Safety and Security
• Other Information Security Tips

Should you have any enquiries, please feel free to contact ICTO Help Desk.

ICTO Help Desk
Location : Room 2085, 2/F, Central Teaching Building (E5), eMap
Telephone : 8822 8600
email : icto.helpdesk@um.edu.mo

Information and Communication Technology Office