USA issues a Cybersecurity Alert

The U.S. Coast Guard has observed a recent uptick in malicious actors using spoofed business websites to target the Marine Transportation System (MTS). Multiple MTS partners have discovered well-constructed, fake websites masquerading as their legitimate business websites. These sites are created presumably to steal information from or install malware on customers’ devices interacting with the sites.

CISA’s “Shields Up” website is the primary location for information and recommendations for adapting a heightened cybersecurity posture. The Coast Guard continues to monitor guidance and products from CISA and partner agencies and will distribute these materials to stakeholders, along with maritime specific context.

The Coast Guard continues to review policies, procedures, and guidance to address the evolving nature of cyber risk management. Additionally, in ports across the country, Area Maritime Security Committees (AMSC) serve as a key resource for local, state, federal and private entities to engage on information sharing, best practices, and port safety and security.

RELEVANT DOCUMENTS:

MCA 01-22 Spoofed Business Websites

Tactics, Techniques, and Procedures of Indicted State-Sponsored Russian Cyber Actors Targeting the Energy Sector

Information Technology Asset Management

Cybersecurity Awareness & Action