Home technology cyber-security state Institutes receive Malware in Mail

State Institutes receive Malware in Mail

Cyber Security

CIO Bulletin
2018-07-31

State Institutes have been receiving CDs through snail mail in what seems to be the most underwhelming of the cybersecurity threats in recent times. The State Archives, State Historical Societies and the State Department of Cultural Affairs are the government bodies that received these mails. It’s left for conjecture as of now on whether any of these organizations have been tricked into inserting these CDs into a government system.

The very well known security researcher Brian Krebs said: “The MS-ISAC said preliminary analysis of the CDs indicate they contain Mandarin language Microsoft Word (.doc) files, some of which include malicious Visual Basic scripts.”

The mail that has been arriving at these government bodies bear Chinese postmarks. The CDs contained in the mail contain word files that consist of malware scripts. The lines of the code in the scripts work when given access to a system that reportedly compromises the overall security of the system.

Curiosity would obviously be the main reason anyone would insert such a suspicious CD into their system. The package that arrives in the snail mail is said to also contain a rambling letter that mentions fireworks, parades and the film industry.