Cybersecurity and Infrastructure Security Agency and FBI issue warning that advanced persistent threat groups are waging cyberespionage campaigns against U.S. think tanks. The groups use low-effort capabilities such as spear-phishing emails and third-party message services. The agencies recommend think tanks use multifactor authentication, segment and segregate networks and functions, change the default username and password of applications and appliances and deploy antivirus software to automatically scan and quarantine suspicious files. Earlier reports have noted that think tanks have been targeted by groups from China and North Korea.”]
Source: https://www.cuinfosecurity.com/alert-apt-groups-targeting-us-think-tanks-a-15509