National Cyber Security Directorate warns of phishing campaign through fake emails

The National Cyber Security Directorate (DNS) warns of an active phishing campaign in which attackers send fraudulent emails that appear to come from official organizations or well-known companies in the financial-accounting field.

"The messages most often contain malicious attachments (e.g. Word files, PDFs or archives), which, once opened, can install ransomware and encrypt the data on the device using mechanisms such as BitLocker, thus blocking access to your information. In some cases, the messages appear to come from legitimate sources, such as an association, a colleague or a partner, and may claim the existence of debts, request payment for fictitious services or ask for personal or financial information, and opening the files leads to the complete compromise of the system", the DNSC shows in a post on its own Facebook account.

In this context, DNSC also sends users some recommendations for protecting data and devices.

"Do not open attachments from unsolicited or suspicious emails, even if they seem legitimate; make regular backups on separate devices or in the cloud, to prevent data loss; install and periodically update antivirus/antimalware solutions with email scanning function; do not make payments based on instructions received by email without checking the official source; carefully check the sender and, in case of suspicion, confirm the authenticity of the message through an alternative channel; report suspicious emails to DNSC at 1911 or at pnrisc.dnsc.ro or to the platform you use", are the main recommendations of the Directorate.

DNSC also conveyed that protecting data and equipment is a shared responsibility, and the rapid detection and reporting of ransomware infection attempts contributes to the resilience of the entire digital ecosystem.