About Stacey Ehling

This author has not yet filled in any details.
So far Stacey Ehling has created 51 blog entries.

FIFA World Cup Cybersecurity Awareness

By |2026-04-15T15:59:32-04:00April 15th, 2026|

The Transportation Security Administration (TSA) is issuing this Cybersecurity Awareness Message (CAM) to provide our industry partners with best practices, current cybersecurity risks, recent incidents, and planning considerations ahead of the 2026 FIFA World Cup (FWC 26) events. This CAM is not in response to any specific threat or incident. The FWC 26 will be [...]

Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure

By |2026-04-07T16:45:51-04:00April 7th, 2026|

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Environmental Protection Agency (EPA), Department of Energy (DOE), and United States Cyber Command – Cyber National Mission Force (CNMF), hereafter referred to as the authoring agencies, have released a Joint Cybersecurity Advisory urgently warning US organizations of ongoing cyber [...]

Wire Transfer Fraud Warning

By |2026-03-26T11:52:45-04:00March 26th, 2026|

Uptick in Fraudulent Wire Transfers Resulting From Account Compromises The NJCCIC continues to receive reports of compromised accounts of public and private sector New Jersey organizations resulting from compromised credentials and phishing emails. Consequently, the NJCCIC also observed an uptick in fraudulent wire transfers from these compromised accounts. Account compromises enable threat actors to access [...]

Ransomware: Anthem Blue Cross

By |2026-03-12T14:08:19-04:00March 12th, 2026|

Anthem Blue Cross Phishing Campaign Deploys Ransomware The NJCCIC observed an Anthem Blue Cross phishing campaign targeting New Jersey State employees. The sender’s display name includes Anthem Blue Cross, the target organization’s domain name, and “Eft Settlement.” However, the sender’s email address does not reference Anthem Blue Cross. The email signature purports to be from [...]

Payroll Phishing Campaign – NJ Schools Warning

By |2026-01-22T14:27:42-05:00January 22nd, 2026|

The NJCCIC received multiple reports of a payroll phishing campaign targeting New Jersey school districts. The subject line references a payroll increment project or direct deposit notice. Threat actors impersonate the superintendent or an administrator by compromising their account or spoofing the target organization’s domain to appear legitimate. The urgent emails claim to require district [...]

Data Privacy Week: Jan 26-30

By |2026-01-22T14:20:05-05:00January 22nd, 2026|

Data Privacy Week is an international effort to spread awareness and reinforce the importance of online privacy and protecting your data.  This year's theme is "Take control of your data." The National Cybersecurity Alliance offers a series of webinars, articles, and resources to help keep your data safe. Here are some key links to information.  [...]

USPS Delivery Scam

By |2025-12-31T09:51:23-05:00December 31st, 2025|

The NJCCIC observed a campaign posing as delivery failure notifications from the United States Postal Service (USPS). The message is addressed to a generic “customer” and directs the user to click the provided link to update their address details. It also claims that if the user ignores the request, the undelivered package will be returned [...]

Fake IT Help Desk Scam

By |2025-12-18T13:14:32-05:00December 18th, 2025|

Action Not Required: The IT Help Desk Scam Threat actors often impersonate IT support to deceive their targets into disclosing account credentials and installing malware. They usually lure with urgent emails related to account issues, such as expired passwords, full mailboxes, and security alerts. Threat actors send emails containing fraudulent links, malicious attachments, or fake [...]

Microsoft Login Scam

By |2025-12-05T10:35:50-05:00December 5th, 2025|

The NJCCIC has recently identified a campaign using Adversary-in-the-Middle (AiTM) techniques to harvest user credentials for account compromise. Threat actors behind this campaign employ various lures to persuade targets to open the supplied file or click the provided link. Some messages claim to be a final document to review or a proposal based on a [...]

Go to Top