USCG HQ MSIB 19-20

***OPEN ATTACHMENT FOR FULL TEXT***

MALICIOUS EMAIL SPOOFING INCIDENTS

This Marine Safety Information Bulletin (MSIB) is intended to highlight several recent cyber events involving increasingly sophisticated malicious email spoofing techniques within the Marine Transportation System (MTS). The types of reported spoofing attacks included impersonating Coast Guard (uscg.mil) email addresses, and Coast Guard industry communications regarding Area Maritime Security Committee meetings. In one case, the opening of a malicious file caused a network compromise that resulted in additional spoofed emails that were sent to MTS port partners. These types of attacks have potential cascading consequences, and impacted organizations should immediately notify all affected stakeholders and local authorities. Coast Guard units along with Maritime Transportation Security Act (MTSA) regulated facilities and vessels should be on high alert and remain vigilant for similar cyber threats within your areas of responsibility.