Access publications and alerts / Alerts and advisories / Archived alerts and advisories / 2023-01: ASD's ACSC Ransomware Profile - Royal 2023-01: ASD's ACSC Ransomware Profile - Royal 24 Jan 2023 Advisory Advisory on Royal ransomware, outlining global targeting, key attack methods, data encryption, and extortion risks to organisations.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Use of Log4j vulnerabilities in ransomware activity Use of Log4j vulnerabilities in ransomware activity 23 Dec 2021 Alert Alert on increased ransomware activity exploiting Log4j vulnerabilities, with Australian organisations at risk from easily exploited security weaknesses.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Sextortion email campaign impacting Australians Sextortion email campaign impacting Australians 16 Apr 2020 Alert Alert on sextortion scam. Australians are being targeted by emails threatening to release personal information unless cyber criminals are paid cash or bitcoin.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Remote code execution vulnerability present in vm2 sandbox Remote code execution vulnerability present in vm2 sandbox 11 Oct 2022 Alert Alert on a remote code execution vulnerability in vm2 sandbox versions prior to 3.9.11. Affected organisations should apply available patches immediately.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Remote code execution vulnerability present in the Windows Scripting Engine of Microsoft Windows Remote code execution vulnerability present in the Windows Scripting Engine of Microsoft Windows 16 Sep 2021 Alert Alert on a Microsoft Windows vulnerability that could allow arbitrary code execution and system takeover. Affected organisations should apply Microsoft security updates promptly.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Remote code execution vulnerability present in the MSHTML component of Microsoft Windows Remote code execution vulnerability present in the MSHTML component of Microsoft Windows 08 Sep 2021 Alert Alert on a Microsoft Windows vulnerability that could allow arbitrary code execution and takeover of affected systems. No patch is available; apply Microsoft’s recommended workarounds.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Ransomware targeting Australian aged care and healthcare sectors Ransomware targeting Australian aged care and healthcare sectors 02 Aug 2020 Alert Alert on observed increased ransomware attacks targeting healthcare, including hospitals and aged care. Stay vigilant and strengthen cyber security measures.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Property-related business email compromise scams rising in Australia Property-related business email compromise scams rising in Australia 30 Aug 2021 Alert Alert on cybercriminals targeting real estate with business email compromise scams. Stay alert to email fraud during property sales, leases and settlements.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Phone scams impersonating Australian businesses and government agencies Phone scams impersonating Australian businesses and government agencies 13 Aug 2020 Alert Alert on cybercriminals impersonating Australian Government agencies, businesses, and delivery companies to compromise devices.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Phone and email scammers impersonating the ASD's ACSC Phone and email scammers impersonating the ASD's ACSC 04 Nov 2020 Alert Alert on government impersonation scams: Australian government agencies will never ask for computer access, crypto, or gift cards. Verify callers via official channels.