Skip Navigation

  • Home
  • Contact us
  • FAQ
  • Glossary
  • Public key
  • Sitemap
  • Cymraeg
  • What's new
CPNI - Centre for the Protection of National Infastructure

Advanced search

  • About CPNI
  • The threats
  • Security planning
  • Methods of attack
  • Protecting your assets
  • Products and services
    • CSIRTUK advisories
      • Advisories archive
    • General protective security publications
    • InfoSec briefings
    • InfoSec technical notes
    • InfoSec vulnerability disclosures
    • Good practice guidelines
    • Viewpoints
    • Information exchanges
    • Risk Management Delivery Group
  • Research
Home > Products and services > CSIRTUK advisories > Advisories archive > December 2006 > UNIRAS Christmas Warning

December 2006

UNIRAS Christmas Warning

ID: 00857
Ref: 813/2006
Date: 08 December 2006:14:37:57
Version: 1

Title: UNIRAS Christmas Warning
Abstract: UNIRAS Christmas Warning
Vendors affected: UNIRAS
Operating systems affected: UNIRAS
Applications affected: UNIRAS

Title
=====

UNIRAS Christmas Warning

Detail
======

During the rapidly approaching Christmas season, organisations should be aware of the ongoing threat from malicious code, i.e. viruses, Trojans and other forms of malware. In past years, experience demonstrates that during the Xmas period organisations are subjected to both targeted and non-targeted attacks using sophisticated social engineering techniques designed to encourage recipients to execute malware. Examples are electronic Xmas cards (Ecards) that contain viruses, Trojans, or phishing attacks (please provide your banking details) with links that download malware.

Organisational security authorities are recommended to remind their users of the potential malware threat and encourage them to be suspicious of any Email that they receive whether from a trusted or untrusted source. They should also ensure that their antivirus software and security updates are current.

Further Information:

Targeted Trojan Email Attacks
URL: http://www.niscc.gov.uk/niscc/docs/ttea.pdf

Social engineering against information systems: what is it and how do you protect yourself?
URL: http://www.niscc.gov.uk/niscc/docs/SocialEngineering08a06.pdf
  • Accessibility |
  • Terms and conditions |
  • Privacy statement |
  • Data protection act |
  • Freedom of information |