Makerere University Directorate for ICT Support

ALERT!
Attackers are creating multiple domains to spread fake copies of popular mobile Applications. Be sure to verify the domains before using them to download anything.

Good Morning!

While many organizations still debate on whether or not to pay the ransom, A recent report by Cybereason indicates that 80% of organizations that paid a ransom were targeted for a second time. So, is it really a thing to do??

Cisco this week released patches for a series of critical vulnerabilities in IOS XE software that could be exploited to execute arbitrary code remotely, cause denial of service, or manipulate device configuration. Apply the patches as guided here: https://tools.cisco.com/security/center/viewErp.x?alertId=ERP-74581

ALERT!
A new phishing campaign using a Fake WhatsApp Backup message to deliver malware is on the move. Be sure to follow the legit procedures to perform backups.

NEW!
European Commission (EC) proposes a common charger for electronic devices, intending to cut down on electronic waste by allowing people to re-use existing chargers and cables when they buy new electronics. Details: https://ec.europa.eu/commission/presscorner/detail/en/ip_21_4613

ALERT!
McAfee Labs warns of a new phishing campaign that utilizes macro capabilities available in Microsoft PowerPoint to install a well-known password stealer (AgentTesla). More details: https://mcafee.com/blogs/other-blogs/mcafee-labs/malicious-powerpoint-documents-on-the-rise/?web_view=true

Out of the 164 malicious apps related to COVID-19 scams detected, 54% of them impersonated TikTok (HelpNetSecurity). Users to check the legitimacy of any apps before downloading them.

44% of internet users admit to weak password practices, including making a minor change to an old password or reusing a password from another account--Businesswire. Password security is very key and such practices need to be checked!