Technical Details
Geolocation
The geolocation of an IP address is often obtained with publicly available information (WHOIS registration) or proprietary information. The level of geographic precision varies widely across sources; some provide country and locality details, while others provide neighborhood-level detail. Additionally, the accuracy of this information varies by source.
However, even if the geolocation of an IP address is accurate, the threat actor may not be physically located near it; instead, they may be hiding their true location through the use of spoofing and network tunnels.
FTC RELEASES ARTICLE ON CHOOSING VPN APPS FOR MOBILE PHONES
PUBLISHED FEBRUARY 22, 2018
The Federal Trade Commission (FTC) has issued guidance to consumers considering using a Virtual Private Network (VPN) for their mobile phones. Some mobile phone users choose to use VPNs to shield the information on their phones when using public Wi-Fi networks.
NCCIC/US-CERT encourages consumers to review the FTC article for more information.
DRUPAL RELEASES SECURITY UPDATES
PUBLISHED FEBRUARY 21, 2018
Drupal has released an advisory to address multiple vulnerabilities in Drupal 7.x and 8.4.x. An attacker could exploit some of these vulnerabilities to obtain access to sensitive information.
NCCIC/US-CERT encourages users and administrators to review Drupal's Security Advisory and upgrade to version 7.57or 8.4.5.
IC3 ISSUES ALERT ON INCREASE IN W-2 PHISHING CAMPAIGNS
PUBLISHED FEBRUARY 21, 2018
The Internet Crime Complaint Center (IC3) has issued an alert on the increase in W-2-related phishing campaigns. Fraudsters often use tax-related phishing emails to get victims to provide personally identifiable information, click on a malicious link, or pay a ransom.
NCCIC/US-CERT encourages taxpayers to review the IC3 Alert and refer to the NCCIC/US-CERT Tip on Avoiding Social Engineering and Phishing Attacks for more information. If you believe you have been a victim of a phishing campaign, report it to IC3 at www.ic3.gov
CISCO RELEASES SECURITY UPDATES FOR MULTIPLE PRODUCTS
PUBLISHED FEBRUARY 21, 2018
Cisco has released several updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
NCCIC/US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the necessary updates:
MICROSOFT RELEASES FEBRUARY 2018 SECURITY UPDATES
PUBLISHED FEBRUARY 13, 2018
Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
NCCIC/US-CERT encourages users and administrators to review Microsoft's February 2018 Security Update Summary(link is external) and Deployment Information (link is external)and apply the necessary updates.
ADOBE RELEASES SECURITY UPDATES
PUBLISHED FEBRUARY 13, 2018
Adobe has released security updates to address vulnerabilities in Adobe Experience Manager, Acrobat, and Reader. A remote attacker could exploit these vulnerabilities to take control of an affected system.
NCCIC/US-CERT encourages users and administrators to review Adobe Security Bulletin APSB18-02(link is external) and APSB18-04 (link is external)and apply the necessary updates.
HOW DO I KNOW THAT ITVUE IS THE RIGHT CONSULTING AGENCY FOR ME?
This is your FAQ Answer. Make sure your writing is clear and concise. It’s a good idea to review what you’ve written and ask yourself the following - if this was my first time visiting the site, would I fully understand this answer? Then revise or expand as necessary. Consider adding a photo or video as a visual tool or for extra impact.
HOW DO YOU CUSTOMIZE YOUR SERVICES FOR NICHE COMPANIES?
This is your FAQ Answer. Make sure your writing is clear and concise. It’s a good idea to review what you’ve written and ask yourself the following - if this was my first time visiting the site, would I fully understand this answer? Then revise or expand as necessary. Consider adding a photo or video as a visual tool or for extra impact.
MY COMPANY IS STRUGGLING IN A CHANGING MARKETPLACE. CAN YOU HELP US STAY RELEVANT?
This is your FAQ Answer. Make sure your writing is clear and concise. It’s a good idea to review what you’ve written and ask yourself the following - if this was my first time visiting the site, would I fully understand this answer? Then revise or expand as necessary. Consider adding a photo or video as a visual tool or for extra impact.
HOW DO I KNOW THAT ITVUE IS THE RIGHT CONSULTING AGENCY FOR ME?
This is your FAQ Answer. Make sure your writing is clear and concise. It’s a good idea to review what you’ve written and ask yourself the following - if this was my first time visiting the site, would I fully understand this answer? Then revise or expand as necessary. Consider adding a photo or video as a visual tool or for extra impact.
HOW DO YOU CUSTOMIZE YOUR SERVICES FOR NICHE COMPANIES?
This is your FAQ Answer. Make sure your writing is clear and concise. It’s a good idea to review what you’ve written and ask yourself the following - if this was my first time visiting the site, would I fully understand this answer? Then revise or expand as necessary. Consider adding a photo or video as a visual tool or for extra impact.