Kia ora,
RiskNZ is sharing the below information with our members on behalf of CERT NZ, who have received reports of different opportunistic online scams and attacks in the wake of the tragic events in Christchurch last week.
Please share to your own networks to spread as wide as possible.
These reports include:
- online donation fraud
- malware embedded in video files
- defacement of NZ websites, and denial-of-service
What’s happening – What this means:
Scammers and attackers are using the tragic event as an opportunity to perform targeted online cyber attacks against New Zealanders.
In the reports we’ve received, the scams and attacks follow these formats:
- phishing emails containing links to fake online banking logins. These emails also contain fraudulent bank accounts where victims can make donations for the Christchurch tragedy
- sharing malicious video files on compromised websites or on social media. A video file containing footage related to the attack had malware embedded in it and this malicious file is being shared online
- attackers changing New Zealand websites to spread political messages about the Christchurch tragedy
- New Zealand websites receiving threats of denial-of-service attacks, which would take them offline.
There are official channels to donate money to the victims of these tragic events. CERT NZ recommends that anyone wishing to donate seek out official platforms and banks rather than using links in emails or on social media.
What to do – Mitigation
If you receive a phishing email or have found a website hosting political messages, report it to CERT NZ.
If your website has been taken over with political content relating to the tragic events in Christchurch, report it to CERT NZ.
We recommend you consent to share your report with our partner agencies (in this case, DIA and NZ Police).
The Department of Internal Affairs considers the footage related to the attack as objectionable material, and therefore considered an offence to possess, share and/or host the harmful content.
If you are aware of online footage related to the attack report it to the Department of Internal Affairs.
Report to DIA’s Censorship Unit
More information
If you need to talk to someone, the following free helplines operate 24/7:
- Depression helpline: 0800 111 757
- Lifeline: 0800 543 354
- Need to talk? Call or text 1737
- Samaritans: 0800 726 666
- Youthline: 0800 376 633 or text 234
Learn about denial-of-service attacks
If you require more information or further support, submit a report on the CERT NZ website or contact them on 0800 CERTNZ.