Report, Respond and Recover | PNG NCSC https://www.ncsc.gov.pg Fri, 22 Aug 2025 03:10:40 +0000 en-AU hourly 1 https://wordpress.org/?v=7.0.4 https://www.ncsc.gov.pg/wp-content/uploads/2020/06/cropped-NCSC-Logo-Small-PNG-32x32.png Report, Respond and Recover | PNG NCSC https://www.ncsc.gov.pg 32 32 Responding to a data breach https://www.ncsc.gov.pg/responding-to-a-data-breach/ Mon, 18 Aug 2025 00:55:56 +0000 https://www.ncsc.gov.pg/?p=3267

A data breach occurs when private or sensitive information, such as passwords, credit card numbers, or personal details, is exposed or stolen without permission. This can affect both individuals and businesses, so it is crucial to respond quickly to limit potential damage.

If you believe your information has been exposed, follow these steps to respond to a data breach.

NCSC Toolbox

https://haveibeenpwned.com

Use this free service to check if your email or phone number was in a data breach.

Confirm the breach

First, check if your data has actually been compromised. You may receive a warning by email, from a service you use, observe unusual activity in your accounts, or learn about it through news reports.

Find out what information was leaked

To gain a clearer picture of what was compromised in the breach, consider the types of information that may have been exposed, such as:

  • email addresses along with passwords,
  • bank account information,
  • personal identifiers like your phone number or address,
  • login credentials for services you may use.

What to do next?

Once you have confirmed whether or not your data has been involved in a breach, it is crucial to take the necessary steps to protect your information.

Change your password

If your login information has been compromised, it is very important to change your passwords right away. Make sure to create strong and unique passwords for each of your accounts and do not use the same password for different services.

Use multi-factor authentication

Add an extra layer of security to your accounts, like a code sent to your phone or an app. It makes it much harder for anyone else to get into your accounts. 

Set up MFA

Watch out for suspicious activity

Stay alert with your email, bank accounts, and online services for any signs of unauthorized activity. Be on the lookout for:

  • Unexpected purchases or items on your bank statements
  • Password reset emails that you did not ask for
  • Unusual logins or messages

If you notice anything suspicious, contact the relevant company or service provider right away.

Report It

If you notice anything suspicious, contact the relevant company or service provider right away. This could be your bank or the online account service provider you are using.

Report a data breach to PNG NCSC here
]]> Responding to scams https://www.ncsc.gov.pg/responding-to-scams/ Fri, 15 Aug 2025 03:10:14 +0000 https://www.ncsc.gov.pg/?p=3171

If you have received a suspicious message, phone call or email, or if you think you’ve been scammed – follow these steps immediately.

Do not respond

  • Don’t reply, even if the message says your account is at risk.
  • Don’t click on any links, or open any attachments.
  • Don’t provide any personal information, passwords or payment details.

Scammers often try to create a sense of urgency. Take your time to asses the situation safely.

How to spot a scam

Report the scam

Reporting helps protect others in our community. You can report a scam to:

  • PNG National Cyber Security Centre
  • Local Police – at your nearest RPNGC police station or to the Cybercrime Unit, located at 7mile Police Station, Port Moresby.
  • Your bank (if money was involved) – visit your nearest branch or email them directly:
    • Bank of South Pacific – servicebsp@bsp.com.pg
    • Kina Bank  – FraudPrevention@kinabank.com.pg
  • Securities Commission of PNG – to report suspicious investment activities

Include any screenshots, email addresses, or phone numbers used in the scam.

Stay safe from scams (external link)

Secure your devices and accounts

If you clicked on a suspicious link or downloaded a file:

  • Run a full virus/malware scan using trusted security software.
  • Change your passwords immediately, especially for any accounts that might be at risk.
  • Turn on two-factor authentication (2FA) if available.

If you gave out financial or personal information

Act quickly:

  • Contact your bank to report the scam.
  • Watch out for unusual activity in your online accounts and bank statements.

Tell others

Let friends, family and coworkers know about the scam – especially if its pretending to be from a trusted government agency, utility provider or community service.

The more people are aware, the harder it is for scammers to succeed.

]]> Respond and recover from phishing https://www.ncsc.gov.pg/respond-and-recover-from-phishing/ Wed, 13 Aug 2025 03:46:29 +0000 https://www.ncsc.gov.pg/?p=3007

Phishing is a common type of cyberattack where bad actors try to trick you into revealing sensitive information such as passwords, credit card numbers, or account logins by pretending to be a trusted source like your bank, a colleague, or a well-known brand.

If you suspect a phishing attempt or happen to fall victim to one, here are the steps you should follow.

Do not engage with the message

If you receive a suspicious email, text, or message:

  • Do NOT click on any links or attachments.
  • Do NOT reply, even if it looks urgent or threatening.
  • Do NOT provide any personal or financial information.

Even clicking a link can be enough to trigger malware or redirect you to a fake login page.

How to spot a phish?

Report the phish

Help prevent future attacks by reporting it.

  • At work: Report to your IT or security team immediately.
  • Personal email: Most services have built-in reporting:
    • Gmail: Click the three dots > “Report phishing”
    • Outlook: Click “Report” > “Phishing”

Additionally, report it to PNG NCSC.

    If you clicked a link or gave information

    1. Change your password immediately
    • Especially for the affected account.
    • If you use the same password elsewhere, change those too.

    2. Enable Multi-Factor Authentication (MFA)

    • Adds an extra layer of protection even if your password was stolen.

    3. Run a virus/malware scan

    • Use trusted antivirus software to scan your device for threats.

    4. Contact affected companies

    • If you gave away banking details, contact your bank or credit card provider to freeze or monitor your account.
    • If work credentials were compromised, notify your IT department immediately.
    ]]>         Respond and recover from ransomware https://www.ncsc.gov.pg/how-to-respond-to-a-ransomware-attack/ Wed, 13 Aug 2025 03:25:23 +0000 https://www.ncsc.gov.pg/?p=2998

    Ransomware is a type of malicious software that locks your files or device until a ransom is paid—often in cryptocurrency.

    If you’re hit by ransomware, acting quickly and carefully can help reduce damage and possibly avoid data loss.

    What do I do if its ransomware?

    Follow the steps below if you believe you are a victim of a ransomware attack.

    Disconnect and isolate your device immediately

    To prevent the ransomware from encrypting more files or spreading:

    • Disconnect from the internet: Turn off your wi-fi, mobile data or remove the ethernet cable.
    • Disconnect external drives: Remove USB drives, external hard drives, or mobile devices that are connected to prevent the ransomware from spreading.
    Reset your credentials
    Ensure you reset the passwords for critical accounts such as administrator, but take care to avoid locking yourself out of essential systems required for recovery.
    Do NOT pay the ransom

    There is absolutely no guarantee your files will be restored. DO NOT PAY!

    Reinstall operating system software

    Safely wipe the infected device and reinstall the operating system (OS).

    Restore from backup

    Before restoring your device from a backup, make sure it is completely free from malware or viruses. Only restore from a backup when you are confident that backup is secure and clean.

    Reconnect device

    Reconnect your device to download and install the latest software security updates.

    Install antivirus or antimalware software

    Download, install and update your antivirus software.

    Monitor activity

    Scan and monitor your device for any suspicious activity.

    ]]>         Respond and recover from account compromise https://www.ncsc.gov.pg/how-to-respond-to-account-compromise/ Wed, 13 Aug 2025 02:54:15 +0000 https://www.ncsc.gov.pg/?p=2990

    An account compromise occurs when someone illegally accesses your email, social media, online banking, or other personal accounts. This can happen through methods like phishing, using the same password on different sites, or a data breach.

    It is crucial to take immediate action to regain access and safeguard your sensitive information.

    Follow these steps below if you believe your online account has been compromised.

    Change your password immediately

    If you still have access to the account:

    • Change your password right away
    • Choose a strong, unique password that you haven’t used elsewhere
    • Log out of all other session

    If you can’t log in:

    • Use the account’s “Forgot Password” or account recovery process.

    Enable multi-factor authentication

    If MFA is not already turned on, turn it on immediately. MFA adds an extra layer of security making it harder for attackers to access your account.

    What is multi-factor authentication (MFA)?

     

    Review account activity

    Once you have secured access to your account:

    • Check for any unauthorized changes or activity (sent messages, new linked devices, transactions, etc…)
    • Remove access from unknown apps, devices or connected services

    Report the incident

    Depending on the type of account, report the account compromise to the account service provider e.g. Google, Facebook, TikTok.

    Additionally, report the incident to PNG NCSC.

    ]]>         Respond and recover from malware https://www.ncsc.gov.pg/how-to-respond-to-a-malware-threat/ Wed, 13 Aug 2025 02:47:06 +0000 https://www.ncsc.gov.pg/?p=2986

    Malware, which is short for malicious software, is designed to get into your device to cause harm or steal important information.

    It comes in different forms like viruses, spyware, ransomware, and trojans, and it can spread through email attachments, unsafe downloads, or compromised websites.

    If you think malware has infected your device, try to stay calm and follow these steps to safely contain and get rid of it.

    Run a full antivirus or malware scan

    Use a trusted antivirus or antimalware software to scan your entire system. Remember to update the software before scanning to ensure the latest threat definitions are being used.

    Manually remove suspicious apps or files

    Check for recently installed or unfamiliar apps. Only delete files or programs if you’re sure they’re malicious. 

    Update your system and software

    Update your device and system software and apps. Enable automatic updates.

    Learn from the incident

    Learn from the incident. Ask yourself:

    • Where did the malware likely come from? (Email? Download? USB?)
    • Was my system updated?
    • Were any sensitive files accessed?

    Learning from the incident can help you prevent if from happening again.

    ]]>