Current Incidents

Phishing in the name of the federal administration
With an email claiming to be issued by the Federal Administration and concerning online payment data, fraudsters try to obtain credit card informations and other personal data. Please do not comply with their request.
08.07.2021 00:00
Bogus blackmail emails
Fraudsters are currently sending out large numbers of bogus blackmail emails in which they pretend to have hacked your mobile phone and to have access to the camera and microphone. They threaten to publish compromising films and images if you do not pay a ransom in bitcoin. This is just a bluff. Do not be intimidated and ignore these fake sextortion emails.
30.06.2021 00:00
Text messages with information about alleged deposits
At present, text messages are being sent stating that several hundred thousand euros in the form of bitcoins has been paid into an account on the alleged investment portal Coinomac. Using the access details provided, the text message recipients can actually log into their alleged account and see the amount mentioned. To retrieve the money from the account, the victim then most probably has to pay high fees. The promised amount does not exist. Ignore and delete the text message.
29.06.2021 00:00
Voice message leads to malware
The NCSC is currently receiving numerous reports of text messages alerting the recipient to a supposed voice message. Anyone who clicks on the link in the text message is taken to a fake website, where the victim is prompted to download the message. In reality, however, it is a case of malware. Do not download this file under any circumstances. Do not click on the link in the text message and delete the message.
21.06.2021 00:00
With an email claiming to be issued by the Federal Tax Administration and concerning Bitcoin/Ivory Options, fraudsters try to obtain customer data. Please do not comply with their request.
18.06.2021 00:00
Swisscom bills allegedly paid twice
We are currently receiving numerous reports about Swisscom bills that have allegedly been paid twice. These are phishing emails. The attackers are using this method to try to obtain access data to the Swisscom Customer Center, as well as credit card data, including a one-time text message code. Ignore such emails.
26.05.2021 00:00
Phishing attempt with classified ads
Someone shows an interest in an item for sale on a classified ad platform, and claims to be saving transfer fees by using a free money transfer service. In order that the money deposited there can be transferred to the sellers' bank account, they must enter their e-banking login and password on a spoofed website. The fraudsters then contact the victims and ask them to forward the code they have just received. The fraudsters now have all the access data they need to hack the e-banking account.
03.05.2021 00:00
Ransomware attacks on QNAP devices
The NCSC has been receiving a growing number of reports of encrypted QNAP NAS (network-attached storage) devices and subsequent ransom demands. The vulnerability CVE-2020-36195 is probably being exploited in these cases. QNAP provided an update to fix this vulnerability on 16 April 2021. The NCSC recommends updating QTS, Multimedia Console and the Media Streaming add-on as a matter of urgency, and generally keeping all device systems up to date:
23.04.2021 00:00