CERT VU advisories & alerts disclose current reported cyber security vulnerabilities and threats identified in Vanuatu. The advisories deliver provide a summary of the threat analysed. Descriptions of the threat reported and mitigation procedures are provided as part of the advisory on how to mitigate the threats to minimise their impacts. Finally, a Traffic Light Protocol (TLP: Colour – See guides page for more information) indicator to show the level or information security and sharing rights.

Advisory 7

TLP Rating: Clear

Microsoft Operating Systems BlueKeep Vulnerability

CERT Vanuatu and the Office of the Chief Information Officer (OGCIO) provides the following advisory.

This is to advise all system and network administrators, managers and business houses in Vanuatu who are using Microsoft operating systems to actively monitor and ensure the latest Microsoft security patches of BlueKeep (CVE-2019-0708) vulnerability are installed.

Advisory 6

TLP Rating: Clear

Website Defacement

CERT Vanuatu and the Office of the Chief Information Officer (OGCIO) provides the following advisory.
This is to advise all Web host users, managers and business houses in Vanuatu that there have been cases of website defacement identified by CERT Vanuatu. The website defacer calls themselves as “Phenix-TN & Mr. Anderson” as shown below in Figure 1:

Advisory 5

TLP Rating: Clear

Email Scam Alerts

CERT Vanuatu and the Office of the Chief Information Officer (OGCIO) provides the following advisory. This is to advise all Internet users in Vanuatu that there are Email Scam threats received by users in the following form/format with Subject header:

Advisory 4

TLP Rating: Green

What are fake Apps?

Fake apps are Android or iOS applications that mimic the look and/or functionality of legitimate applications to trick unsuspected users to install them. These are created by scammers and cyber-criminals to perform a variety of malicious actions.

Advisory 3

TLP Rating: Amber

CERT Vanuatu and the Office of the Chief Information Officer (OGCIO) are giving everyone this international advisory from Intel's advisory centre. We acknowledge the work of Intel with this advisory.

  1. INTEL-SA-00145: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html

Advisory 2

TLP Rating: Clear

CERT Vanuatu and the Office of the Chief Information Officer (OGCIO) have identified the following threat:

    1. SQL Injection Attempt: Multiple probing and SQL injection attempts over HTTP requests from international IP sources have been constantly recorded.