{"id":1160,"date":"2024-10-10T10:00:52","date_gmt":"2024-10-10T14:00:52","guid":{"rendered":"https:\/\/blogs.duanemorris.com\/techlaw\/?p=1160"},"modified":"2024-10-10T10:00:54","modified_gmt":"2024-10-10T14:00:54","slug":"new-york-department-of-financial-services-issues-cybersecurity-threat-alert-as-malicious-activity-rises","status":"publish","type":"post","link":"https:\/\/blogs.duanemorris.com\/techlaw\/2024\/10\/10\/new-york-department-of-financial-services-issues-cybersecurity-threat-alert-as-malicious-activity-rises\/","title":{"rendered":"New York Department of Financial Services Issues Cybersecurity Threat Alert as Malicious Activity Rises"},"content":{"rendered":"\n

The New York Department of Financial Services (DFS) published an alert<\/a> directed to all DFS-regulated entities specifically warning of a widespread cybersecurity threat involving social engineering of regulated institutions\u2019 IT help desk personnel and call center personnel.<\/p>\n\n\n\n

According to the alert<\/a>, DFS has detected a trend in which threat actors have targeted IT personnel as a part of schemes to gain system access through password resets and diversion of multi-factor authentication (MFA) to new devices. According to DFS, threat actors have employed tactics including voice-altering technology and leveraging information found online about identities of individuals, in attempts to convince IT personnel at help desks and call centers to comply with fraudulent access requests.<\/p>\n\n\n\n

DFS cautions all regulated entities to be on \u201chigh alert for suspicious communications\u201d based on the observed threat actors\u2019 recent activity. Entities are encouraged by DFS to:<\/p>\n\n\n\n