IC3 2024  2026  2025  2024  2023  2022  2021

2024 Press Releases 

  1. Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud
  2. Scammers Exploit 2024 US General Election to Perpetrate Multiple Fraud Schemes
  3. Just So You Know: Foreign Threat Actors Likely to Use a Variety of Tactics to Develop and Spread Disinformation During 2024 U.S. General Election Cycle
  4. Counterfeit Check Scam Targets Law Firms Via Debt Collection Scheme
  5. Anniversary of October 7, 2023 HAMAS Attacks May Motivate Individuals to Violence in the United States
  6. Just So You Know: False Claims of Hacked Voter Information Likely Intended to Sow Distrust of U.S. Elections
  7. Business Email Compromise: The $55 Billion Scam
  8. North Korea Aggressively Targeting Crypto Industry with Well-Disguised Social Engineering Attacks
  9. Just So You Know: Ransomware Disruptions during Voting Periods Will Not Impact the Security and Resiliency of Vote Casting or Counting
  10. Safety Concern Related to Recent Trend in Financial Institution Customer Fraud Scheme
  11. FBI Warns of Scammers Impersonating Cryptocurrency Exchanges
  12. DDoS Attacks: Could Hinder Access to Election Information, Would Not Prevent Voting
  13. Scammers Falsely Promise Significant Profit to Victims in Collectible Coin Scams
  14. Fictitious Law Firms Targeting Cryptocurrency Scam Victims Offering to Recover Funds
  15. Scammers Defraud Individuals via Work-From-Home Scams
  16. Guidance on the 911 S5 Residential Proxy Service
  17. Democratic People's Republic of Korea Leverages U.S.-Based Individuals to Defraud U.S. Businesses and Generate Revenue
  18. New Verification Schemes Target Users of Online Dating Platforms
  19. Alert on Cryptocurrency Money Services Businesses
  20. Smishing Scam Regarding Debt for Road Toll Services
  21. Cyber Criminals Target Victims Using Social Engineering Techniques
  22. Child Sexual Abuse Material Created by Generative AI and Similar Online Tools is Illegal
  23. IC3 Annual Report and Fraud Flyer
  24. Scammers Use Couriers to Retrieve Cash and Precious Metals from Victims of Tech Support and Government Impersonation Scams
  25. Malicious Actors Threaten U.S. Synagogues, Schools, Hospitals, and Other Institutions With Bomb Threats
  26. Chinese Police Imposters Incorporate Aggressive Tactics to Target U.S.-Based Chinese Community

 

2024 Industry Alerts 

  1. HiatusRAT Actors Targeting Web Cameras and DVRs
  2. Enhanced Visibility and Hardening Guidance for Communications Infrastructure
  3. #StopRansomware: BianLian Data Extortion Group
  4. 2023 Top Routinely Exploited Vulnerabilities
  5. Easy Access to Information for Conducting Fraudulent Emergency Data Requests Impacts US-Based Companies and Law Enforcement Agencies
  6. New Tradecraft of Iranian Cyber Group Aria Sepehr Ayandehsazan aka Emennet Pasargad
  7. Safe Software Deployment: How Software Manufacturers Can Ensure Reliability for Customers
  8. Product Security Bad Practices
  9. Iranian Cyber Actors' Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations
  10. Update on SVR Cyber Operations and Vulnerability Exploitation
  11. Principles of Operational Technology Cyber Security
  12. Iranian Cyber Actors Targeting Personal Accounts to Support Operations
  13. People's Republic of China-Linked Actors Compromise Routers and IoT Devices for Botnet Operations
  14. Secure by Design Alert: Eliminating Cross-Site Scripting Vulnerabilities
  15. Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure
  16. #StopRansomware: RansomHub Ransomware
  17. Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations
  18. Best Practices For Event Logging and Threat Detection
  19. #StopRansomware: BlackSuit (Royal) Ransomware
  20. Secure by Demand Guide: How Software Customers Can Drive a Secure Technology Ecosystem
  21. North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime's Military and Nuclear Programs
  22. Secure by Design Alert: Eliminating OS Command Injection Vulnerabilities
  23. State-Sponsored Russian Media Leverages Meliorator Software for Foreign Malign Influence Activity
  24. APT40 Advisory: PRC MSS tradecraft in action
  25. 2024 U.S. Federal Elections: The Insider Threat
  26. Exploring Memory Safety in Critical Open Source Projects
  27. Social Engineering Tactics Targeting Healthcare & Public Health Entities and Providers
  28. Modern Approaches to Network Access Security
  29. Swatting Prevention and Response Guidance For Election Workers and Law Enforcement
  30. Mitigating Cyber Threats with Limited Resources: Guidance for Civil Society
  31. #StopRansomware: Black Basta
  32. Cyber Criminals Phishing and Smishing US Retail Corporations for Gift Card Fraud
  33. Secure by Design Alert: Eliminating Directory Traversal Vulnerabilities in Software
  34. North Korean Actors Exploit Weak DMARC Security Policies to Mask Spearphishing Efforts
  35. Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity
  36. #StopRansomware: Akira Ransomware
  37. Deploying AI Systems Securely: Best Practices for Deploying Secure and Resilient AI Systems
  38. Secure by Design Alert: Eliminating SQL Injection Vulnerabilities in Software
  39. PRC State-Sponsored Cyber Activity: Actions For Critical Infrastructure Leaders
  40. Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways
  41. #StopRansomware: Phobos Ransomware
  42. Russian Cyber Actors Use Compromised Routers to Facilitate Cyber Operations
  43. SVR Cyber Actors Adapt Tactics for Initial Cloud Access
  44. Top Cyber Actions for Securing Water Systems
  45. Identification and Disruption of the Warzone Remote Access Trojan (RAT)
  46. Risk Management for Electronic Ballot Delivery, Marking, and Return
    • Alert noteIn 2020, the Cybersecurity and Infrastructure Security Agency (CISA), U.S. Election Assistance Commission (EAC), Federal Bureau of Investigation (FBI), and National Institute of Standards and Technology (NIST) provided "official use only" guidance to state election officials on the risks associated with electronic ballot delivery, marking, and return. For the 2024 election cycle, CISA, EAC, FBI, and NIST are reclassifying and redistributing this guidance (attached), which remains operative, so that it can be made publicly available and to ensure state officials and policymakers are fully informed of risks associated with electronic ballot return.
  47. Joint Guidance: Identifying and Mitigating Living Off the Land Techniques
  48. State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
  49. Secure by Design Alert: Malicious Cyber Actors Exploiting Insecure SOHO Routers
  50. Incident Response Guide: Water and Wastewater Sector
  51. Cybersecurity Guidance: Chinese-Manufactured UAS
  52. Known Indicators of Compromise Associated with Androxgh0st Malware