The FBI’s Internet Criminal Complaint Center May 15 released an alert warning of a malicious text and voice messaging campaign involving impersonators pretending to be senior U.S. officials. The individuals, active since April, have been targeting many current or former senior U.S. federal or state government officials and their contacts. The actors are using text and artificial intelligence-generated voice messages to establish a rapport before gaining access to personal accounts that could be used to target others, the FBI said.  

“Receiving a call from a ‘senior U.S. official’ is certainly something that would get attention, but as with any unsolicited communication, especially those providing links and soliciting information, carefully verify the source of the message,” said Scott Gee, AHA deputy national advisor for cybersecurity and risk. “If, for instance, you receive a suspicious message purporting to be from a senior official at a federal agency, independently look up the number from the internet and call to verify the legitimacy of the contact. Do not use any phone numbers or email addresses provided in the suspicious message. This ‘out of band’ verification is the best strategy for any phishing attempt. If that official is truly trying to contact you, someone in their office will know about it.” 

The FBI also advised individuals who receive a message claiming to be from a senior U.S. official to not assume the message is authentic. The agency provided recommendations to help identify suspicious messages. 

For more information on this or other cyber and risk issues, contact Gee at sgee@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity

Headline
The FBI released an alert March 20 warning of a technique used by cyber actors working on behalf of the Iranian government to conduct malicious cyber activity…
Headline
The Cybersecurity and Infrastructure Security Agency March 18 released an alert urging U.S. organizations to harden their endpoint management systems following…
Headline
The Health Sector Coordinating Council Cyber Working Group and Health-ISAC (Information Sharing and Analysis Center) will host a joint cybersecurity event July…
Headline
Stryker, a medical technology company that provides services and products for hospitals, was disrupted globally by a cyberattack, the company announced March…
Headline
The White House issued an executive order March 6 to combat cybercrimes by threat groups. The order highlights how such groups can receive willing or…
Headline
The Administration for Strategic Preparedness and Response has released a new cybersecurity module for organizations to conduct risk assessments. The free…