Is your computer running slowly? Are files suddenly missing? You may have malware. Malware is malicious software that can compromise computer functions, steal data, access private networks, and cause harm.
Protect yourself and the Postal Service™ from these types of malware:
n Adware. Adware looks like an advertisement (typically a pop-up window) that can download malware to your device without your knowledge.1 Also, beware of “freeware” that claims to remove adware from your computer. Hackers can mimic legitimate software to trick users.2 USPS® policy prohibits employees from downloading freeware on USPS equipment (see Handbook AS-805, Information Security, section 10-3.4.3, Prohibited Software, for additional guidance).
n Ransomware. Ransomware has become the number one security concern for organizations.3 Ransomware holds your device “captive” by restricting access to files, folders, or systems until a ransom is paid. Just last week, over 64 countries across the world, including the U.S., were targeted by the Petya ransomware attack. This attack impacted a range of industries, including banking, law, pharmaceutical, and energy companies.4 Similarly, in May 2017, the WannaCry ransomware attack reached over 300,000 computers in 150 countries in a matter of days. Victims were required to pay $300 to decrypt or unscramble their files.5 To date, the Postal Service has not been impacted by these attacks.
n Spyware. Spyware monitors internet activity and allows hackers to capture passwords, login credentials, credit card numbers, physical locations, and more. Spyware is often distributed through free software or applications (apps).6 Earlier this year, Google removed an Android app called “System Update” that used spyware to track users’ physical locations.7
n Trojans. Trojans disguise themselves as legitimate files or software, but can execute hidden programs, commands, and scripts without your knowledge. In 2015, security researchers identified over 17,000 Android devices sold through Amazon that had a pre-installed trojan called “Cloudsota.” This trojan potentially allowed hackers to gain remote access to the device and remove anti-virus software.8
n Worms. Worms spread over networks and cause harm by consuming bandwidth and overloading web servers. In the early years of social media, the worm known as “Koobface” attacked Facebook and stole users’ login credentials to communicate with their contacts and lure them to malicious websites.9
As a rule of thumb, always think carefully before clicking on suspicious links, emails, attachments, or web pages. Additionally, never download unapproved programs or software to USPS equipment.
If you suspect your USPS device may have malware, report it to the CyberSecurity Operations Center (CSOC) by emailing cybersafe@usps.gov. For more information about how to stay cybersafe, check out the CyberSafe at USPS® websites on Blue and Lite Blue, or the public-facing website at uspscybersafe.com.
— Corporate Information Security Office,
Chief Information Security Officer
and Digital Solutions, 7-6-17
