- Sep 17, 2020
Press Release
What are phishing emails phishing emails are often referred to as fake, spam and suspicious emails. The purpose of phishing emails are to encourage and persuade you to compromise your personal data or your organisation’s security by asking you to reveal passwords, personal information, financial information, to transfer funds, to visit fake websites, to click on malicious links, open malicious f..
Grand Cayman KY1-1102
Cayman Islands
Tel: (345) 946-4282
UTILITY REGULATION AND COMPETITION OFFICE
17 September 2020
PRESS RELEASE
Phishing Email Alert
The Utility Regulation and Competition Office (OfReg) would like to inform the public that, we were notified of a widely circulating ‘Phishing Email’ campaign targeted at both the public and private sectors across the Cayman Islands.
What is Phishing Email
Phishing emails are often referred to as fake, spam and suspicious emails. The purpose of phishing emails are to encourage and persuade you to compromise your personal data or your organisation’s security by asking you to reveal passwords, personal information, financial information, to transfer funds, to visit fake websites, to click on malicious links, open malicious files and the like.
What to Look out for
Simple tips you can use to spot phishing emails include: hovering your cursor over the link, checking the sender's email address carefully, looking out for emails which purport to have a sense of urgency or include threats.
This particular ‘Phishing Campaign’ includes an attached file.
The .ZIP file is suspected to be an EXCEL file containing Malicious Macros which would likely execute the malicious payload upon opening
The Excel attachment is been named to appear relevant
The actual file name of the Malicious File used in the Phishing Campaign is:
Compensation_Reject_163807...9142020.zip Malicious (72.4 KB)
File: Compensation_Reject_1638072810_09142020.xls 110.5 KB
Result: macro - archive - malicious formula
Compensation_Reject_16380...9142020.xls Malicious (110.5 KB)
The subject of the email, may be:
Subject Re: RE: Statement from ABCDEFG LTD.
What to do if you have received the Phishing Email:
- You should provide your personnel with regular cyber awareness training. Regarding, this particular ‘Phishing Email’ campaign, your personnel should be advised that if they receive the suspicious email, they should not open the email attachment or click on the link with the email.
- If any of your personnel, have already mistakenly, opened the attachment or clicked on the link, you should immediately turn off your computer and seek assistance from your IT Department.
- If any of your personnel, have received the email and have not opened it or clicked on the attachment/link, then report it immediately to your IT Department, Line Manager or the nearest police station.
END
The Utility Regulation and Competition Office (OfReg) is the independent regulator for the electricity, information and communications technology, water, wastewater and fuels sectors in the Cayman Islands. OfReg also regulates the use of electromagnetic spectrum and manages the .ky internet domain.