Hot topics

Week 12: Ticket scammers target buyers and sellers

25.03.2025 - We regularly receive reports of ticket fraud, and with ticket sales for this year’s open-air season and the upcoming Eurovision Song Contest about to begin, the number of scams is likely to increase in the coming weeks. Scammers take advantage of the fact that demand for tickets outstrips supply: they resell tickets at inflated prices, sell counterfeit tickets and put fake ads on the internet. In an unusual and frequently reported scam, they try to lure their victims to a fake website. Exercise caution and don’t let scammers fool you.

Disruption to federal IT systems due to DDoS attack

19.03.2025 – As a result of intensive DDoS attacks, various IT services of the Federal Administration have been temporarily affected since around 2:30 p.m. on Wednesday, March 19, 2025.

Week 11: Chain phishing with Microsoft 365

18.03.2025 - Over the past week, we have seen a number of chain phishing attempts targeting Microsoft 365 accounts in organisations. The aim of these attacks is to gain access to accounts in order to steal sensitive data that can be used for further attacks. What makes this type of phishing scam unique is the way that it spreads, in a kind of chain reaction. As one of the most widely used platforms for communication and collaboration in offices, Microsoft 365 accounts are an interesting target for cybercriminals.

Week 10: Involuntary subscriptions when visiting legitimate websites

11.03.2025 - Last week we received a report about what appeared to be a dodgy car owner enquiry website – but a check of the website revealed no irregularities and we found the site to be legitimate. However, the person who submitted the report did incur unwanted costs.

Reporting cyberattacks on critical infrastructure mandatory from 1 April 2025

07.03.2025 - At its meeting on 7 March, the Federal Council introduced a reporting obligation for cyberattacks on critical infrastructure, which will come into force on 1 April. Operators of critical infrastructure will be required to report cyberattacks to the National Cyber Security Centre (NCSC) within 24 hours of discovery. These reports will enable the NCSC to assist victims of cyberattacks and alert operators of critical infrastructure.

Week 9: Hotels and guests targeted by cybercriminals

04.03.2025 - In several of our weekly reviews we have reported on cyberattacks on hotels and their guests. In the last few days we have received a number of fraud reports from hotel guests. In most cases, the cyberattackers had gained access to a hotel's reservation information.

Online events on the topic of "reporting obligation for cyberattacks on critical infrastructure"

27.02.2025 - The reporting obligation for cyberattacks on critical infrastructure will be introduced in the first half of 2025. To show the affected organizations how to act correctly in the event of a cyberattack, the National Cyber Security Centre (NCSC) is organizing a series of online events on the topic of "reporting obligation for cyberattacks on critical infrastructure".

Week 8: Phishing tricks – deceptive emails and how you can protect yourself

25.02.2025 - Phishing continues to be one of the most commonly reported scams – and unfortunately one that many people fall victim to. Scammers go to great lengths to make their messages look as real as possible, using a variety of tricks to increase their chances of success.

Week 7: How celebrities are impersonated for investment scams

18.02.2025 - When using the internet today, you often come across scam websites that were designed to look like official news or TV sites. The scammers claim that you can make a fortune if you invest a little of your money with them, and they quote celebrities in fake interviews to give themselves credibility. These scam sites are just a click away and are promoted through ads and links on social media, streaming sites and elsewhere.

Cybersecurity: NCSC Director Florian Schütz attends various international events

14.02.2025 - To strengthen international cooperation in cybersecurity, Florian Schütz, director of the National Cyber Security Centre (NCSC), has been attending various international cybersecurity events over the past few days. He chaired a panel at the AI Action Summit in Paris on building trust in artificial intelligence, met with cybersecurity authorities ahead of the Munich Security Conference and took part in a discussion at the Munich Cybersecurity Conference on the latest developments and best practices.

Information of previous years

Last modification 15.11.2024

Top of page