CERT VU advisories & alerts disclose current reported cyber security vulnerabilities and threats identified in Vanuatu. The advisories deliver provide a summary of the threat analysed. Descriptions of the threat reported and mitigation procedures are provided as part of the advisory on how to mitigate the threats to minimise their impacts. Finally, a Traffic Light Protocol (TLP: Colour – See guides page for more information) indicator to show the level or information security and sharing rights.

Advisory 13

TLP Rating: Clear

Critical vulnerabilities in Microsoft Windows TCP/IP stack

CERT Vanuatu (CERTVU) and the Office of the Chief Information was alerted of this vulnerabilities by its international partners.

The CERTVU office would like to advise it’s constituents on critical vulnerabilities in Microsoft Windows TCP/IP stack. Microsoft in its February 2021 monthly security update addressed several vulnerabilities in the TCP/IP stack. There are two critical vulnerabilities in particular that could allow an attacker to gain Remote Code Execution (RCE) access on vulnerable Windows devices. The vulnerabilities affects IPv4 and IPv6 respectively.

Advisory 12

TLP Rating: Clear

Misinformation Threats Alert

CERT Vanuatu and the Office of the Chief Information Officer (OGCIO) provides the following advisory.

CERT Vanuatu (CERTVU) office has received reports regarding “Misinformation” threats and attacks from Internet users in Vanuatu, specifically it’s users using Social Media platforms such as Facebook, Twitter and Instagram. This advisory with also assist anyone to understand and avoid misinformation on these platforms. This advisory will also apply on information from online platforms and news and entertainment platforms.

Advisory 11

Priority Level: Medium

TLP Rating: Clear

Social Media Online Scams

CERT Vanuatu and the Office of the Chief Information Officer (OGCIO) provides the following advisory.

CERT Vanuatu (CERTVU) office has received reports regarding the above mentioned attacks on its constituents through social media (Facebook).

Advisory 10

TLP Rating: Clear

Windows 7 support will end on January 14, 2020

CERT Vanuatu and the Office of the Chief Information Officer (OGCIO) provides the following advisory.

CERT Vanuatu (CERT VU) office has received reports regarding the above mentioned threat and security alert due to the Windows 7 end-of-life support which will end on the 14th of January 2020. Lack of technical support and application of Microsoft security updates means that all Windows 7 computer systems are vulnerable to cyber-attacks or threats.

Advisory 9

TLP Rating: Clear

Emotet Malware Campaign

CERT Vanuatu (CERTVU) and the Office of the Chief Information Officer (OGCIO) provides the following advisory. We acknowledge the Australian Cyber Security Centre (ACSC) who has alerted us of this threat.

Advisory 8

TLP Rating: Clear

Phone Call Attack and Scams

CERT Vanuatu and the Office of the Chief Information Officer (OGCIO) provides the following advisory.

CERT Vanuatu (CERT VU) office has received reports regarding the above mentioned attacks on its constituents, and specifically those involved in the Recognised Seasonal Employer (RSE) scheme with Australia and New Zealand.