Forest Global Training Partners

Cyber Risks · Krebs on Security

State Govts. Warned of Malware-Laden CD Sent Via Snail Mail from China

Summary: Several U.S. state and local government agencies reported receiving letters via snail mail, postmarked from China, that contained malware-laden compact discs, according to a non-public alert from the Multi-State Information Sharing and Analysis Center (MS-ISAC). MS-ISAC said preliminary analysis found the CDs held Mandarin-language Microsoft Word (.doc) files, some with malicious Visual Basic scripts, and that State Archives, State Historical Societies, and a State Department of Cultural Affairs had received letters addressed specifically to them.

Bottom line: The campaign skipped email entirely and went after archives, historical societies, and cultural affairs offices - agencies that may sit outside the perimeter controls built for network-borne phishing. It is not clear whether anyone inserted a disc into a government computer, so the exposure window may still be open.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related