PPA Cybersecurity Page

🌪️ CYBERSECURITY ADVISORY: SUPER TYPHOON UWAN

As Super Typhoon UWAN approaches and is expected to impact several port areas, we remind everyone to take urgent precautions to protect IT systems and digital assets.

🔐 CYBERSECURITY & EQUIPMENT SAFETY REMINDERS:

✅ Power Down & Unplug all IT equipment (computers, Starlink devices, printers, routers, etc.) to prevent damage from power surges.
✅ Secure Devices in waterproof containers or elevated areas to avoid water damage.
✅ Back Up Critical Data to cloud storage or external drives.
✅ Disconnect Network Equipment to prevent short circuits and data loss.
✅ Ensure Physical Security of devices in case of evacuation or limited access.
✅ Stay Alert for phishing or scam messages exploiting typhoon-related concerns.

📣 Be proactive. Protect your systems before the storm hits.
For updates, follow official weather bulletins and internal advisories.
Stay safe and cyber-aware! 💻⚠️🌧️

HEADS UP, GCASH USERS!

The National Privacy Commission (NPC) announced on Monday that an investigation is now underway regarding a reported data leak allegedly involving GCash operator G-Xchange, Inc.

"The NPC has immediately launched an investigation after a dark web post appeared claiming to sell user information. The post, made by a threat actor using the alias 'Oversleep8351,' allegedly offers merchant and basic user data, GCash account numbers, linked bank and virtual card accounts, and KYC (Know Your Customer) records containing names, addresses, employment details, and valid Philippine IDs," the commission said.

While the matter is being verified, the regulator is urging GCash users to take extra measures to secure their accounts.

"GCash users should actively monitor their accounts, regularly update their MPINs and passwords, and enable additional security features to protect their information. They must also remain alert to phishing attempts and refrain from sharing personal or sensitive data while the investigation is ongoing," the NPC added. (Facebook/NPC)

🛑 PHISHING ALERT! 🛑
Don’t Get Hooked by Fake Emails!
📧 Subject: “You Have Received Secure File Attachments”
🚨 Looks like SharePoint? Think again!
________________________________________
⚠️ Red Flags in This Email:
• Suspicious Link:
➤ lime-oryx-283 1666.hostin gersite .co m is not a Microsoft domain.
• Urgency & Temptation:
➤ Claims of “secure documents” like Remittance.pdf and Invoice_Q3.pdf to lure clicks.
• Fake Branding:
➤ Uses SharePoint and Avast logos to appear legitimate.
• Generic Disclaimer:
➤ Often copied from real emails to look authentic.
________________________________________
✅ How to Stay Safe:
• Never click on unknown or suspicious links.
• Verify sender email and domain carefully.
• Report phishing to your IT Site Admins immediately.
• Use antivirus software and keep it updated.
________________________________________
🔐 Think Before You Click.
Protect your data. Stay cyber-aware.

🚨 SCAM ALERT: FAKE DELIVERY INVOICE 🚨
Please be aware of a fraudulent invoice circulating under the name "PORT AUTHORITIES PHILIPPINES" with the label "FIRST CLASS DELIVERY." This scam targets individuals by requesting urgent payments for supposed delivery fees with promises of a 100% refund upon delivery.

⚠️ Key Red Flags:
* Fake company name and branding.
* Claims of refundable fees for tracking, invoice, tax, and insurance.
* Urgent demand to pay within 1 hour.
* Uses pressure tactics and vague language to rush payment.
* Total amount requested: ₱8,000.00 PHP.
* Mentions items like a concrete mixer with a 100% discount to appear legitimate.

📌 What to Do:
* Do NOT send money to unknown senders.
* Verify with official sources before making any payments.
* Share this post to protect others from falling victim.

Stay vigilant and always double-check before making any financial transactions online. Scammers prey on urgency and trust—don’t let them win.