The Cabinet Division of the government has issued a crucial warning to all federal ministries and departments regarding a series of cyber attacks and fraudulent communications. This warning comes in response to a wave of fake emails and WhatsApp messages attributed to government departments, which have raised concerns about the security of sensitive government information.
Sophisticated Attackers Using Fake Identities
The warning, detailed in a letter sent to all federal ministries, highlighted the use of fake email IDs, primarily that of “JS (COORD),” a common designation in government departments. It was noted that various ministries also received deceptive emails from impostors claiming to be from the Prime Minister’s Office (PMO) and PM Secretariat. These fraudulent communications often contained malicious attachments, urging recipients to download files onto their computers.
Read More: China condemns US ‘cyber theft’
Urgent Calls for Vigilance
The Cabinet Division’s letter stressed the urgency of the situation and urged all federal ministries to exercise extreme caution when receiving emails and messages from unknown or suspicious sources. Simultaneously, an investigation into the matter is underway at the highest level to identify the perpetrators and address the security breach.
Beware of SIFC Communications
In addition to the fake emails and messages attributed to government offices, the letter also raised concerns about deceptive emails and phone calls claiming to be from the Special Investment Facility Council (SIFC). The warning specifically mentioned individuals posing as “Javed,” claiming to be the “deputy director of SIFC and PM secretariat,” and “Shehzad Ahmed,” purporting to be the “assistant director of PMO and SIFC Cell.” These impostors may attempt to deceive ministries into receiving calls or downloading files.
Verify Your Communications
The letter emphasized the need for ministries to exercise caution and verify the authenticity of incoming communications. It specifically mentioned that any WhatsApp messages or emails from the above-mentioned individuals or email ID “shahzadahmad@outlook.com” should be ignored and blocked. It also recommended that emails referring to the SIFC Apex Committee should only be opened after verifying their source.
Enhancing Cybersecurity Measures
To bolster cybersecurity, the Cabinet Division recommended that an antivirus program be installed on all systems used for opening emails. As an alternative, ministries were advised to consider using Apple Mac computers or installing a PC with an appropriate, user-friendly version of GUI-based Linux, both of which are known for their enhanced security features.
Action Required on Specific Emails
The letter further stipulated that all ministries that had opened the email attributed to the press secretary of the PMO, dated August 3, 2022, should take immediate action by blocking the associated IP address.
Shared Responsibility
In light of this warning, it’s evident that maintaining the cybersecurity of government systems and data is a shared responsibility. While the Cabinet Division is actively investigating the recent cyberattacks and fake communications, federal ministries and departments must remain vigilant and take steps to protect sensitive information.
Broader Cybersecurity Landscape
This incident serves as a reminder of the broader cybersecurity landscape, where attackers continuously evolve their tactics to breach security systems. In a world heavily reliant on digital communication, it is essential for organizations to stay proactive and adapt to emerging threats.
Read More: Unrest and Cyber Warfare: Pakistan’s Chaotic Struggle
Ultimately, the government’s response to this cybersecurity threat is a testament to its commitment to safeguarding sensitive information. It also highlights the need for collaborative efforts among government bodies, the private sector, and individuals to create a more resilient and secure digital environment.