Cyber Crime is on the increase. We are all aware of it, but the reality is that we also deep down assume it won’t happen to us. However, we all must take it more seriously. Below are two articles by Denise Rion, one highlighting a recent Microsoft alert and the other emphasising the need to be cyber security aware, especially with the ongoing Ukraine conflict.

Rupert Ashby spoke to a BFFF member this week, a recent victim of cybercrime,  and got a first-hand account of how devastating such an attack can be on a business, however big or small. So please make sure you all read the information below and do pass this on to your IT teams.

We know that many of you are up to speed and prepared for any such eventuality, but we would not be doing our job if we did not keep pushing the message.

MICROSOFT WARNS OF MALWARE TARGETING LINUX SYSTEMS

NCSC PUBLISH NEW GUIDANCE ON MAINTAINING CYBER SECURITY

Earlier this year, the NCSC asked UK organisations to bolster their cyber defences in response to the heightened threat in relation to the Russia-Ukraine conflict.

In the months since its publication the NCSC has seen significant cyber activity in Ukraine – and as such are stressing how important it is that a strengthened cyber posture is maintained.

There have been several reports published around the state of the cyber security industry, with warnings of skilled workers leaving the profession due to increasing stress levels. Therefore, the NCSC have published new guidance on maintaining a strengthened cyber security posture in a sustainable way.

It contains advice for business leaders and managers about how to manage the residual risk from an extended period of heightened cyber threat whilst prioritising staff wellbeing, and stresses the importance of:

• revisiting risk-based decisions to ensure defences are implemented in an efficient way for the long term
• empowering frontline staff to take decisions about prioritisation
• ensuring that workloads are spread across individuals and teams and that frontline staff can take breaks to recharge
• providing resources to managers and teams to recognise the signs of someone who is struggling

This guidance is the latest in an ongoing package of support from the NCSC in relation to the war in Ukraine.

You can subscribe to the NCSC Weekly Threat Report as well as other NCSC publications here

The National Cyber Security Centre (NCSC) has highlighted that Microsoft’s Security Intelligence team has uncovered “notable updates” to malware targeting Linux systems to install cryptomining malware.

The group behind the malware, known as the “8820 gang”, has been active since 2017. Their most recent campaign has been targeting i686 and x86_64 Linux systems and uses RCE exploits for CVE-2022-26134 and CVE-2019-2725 for initial access (Atlassian Confluence Server and Oracle WebLogic, respectively).

Microsoft also revealed that the malware features self-propagating capabilities:

“The loader uses the IP port scanner tool “masscan” to find other SSH servers in the network, and then uses the GoLang-based SSH brute force tool “spirit” to propagate. It also scans the local disk for SSH keys to move laterally by connecting to known hosts.”

To protect against this threat, Microsoft recommends that organisations should secure systems and servers, apply updates, and use good credential hygiene.

The NCSC has advice for organisations on updating their approach to password policies and implementing effective authentication policies.

They also have guidance available for organisations, both public and private sector, to help them mitigate against malware infection and what to do should they find themselves already infected.

We would like to remind members that if you are liable for the plastics packaging tax (PPT), your first quarterly PPT return should have been submitted from 1^st July and any tax must be paid no later than 29 July 2022.

Your PPT return needs to cover plastic packaging your business manufactured or imported into the UK from when you became liable to 30 June 2022.

Remember that:

• You must keep accounts and records to support the information provided when you complete your quarterly PPT return.
• Your accounts must show how you have worked out the figures you submit on your PPT return, and your records must show the evidence to support these figures.
• You must keep your accounts and records for at least 6 years from the end of the accounting period, and record weight in tonnes, kilograms, and grams.
• You will need to pay any tax due through your online PPT account. You can pay via Direct Debit, BACS, CHAPS, Debit/Corporate credit card or Faster Payments.
• You will need to submit a PPT return to HMRC and pay any tax due every quarter. Your PPT return must cover an accounting period. For 2022-23, the accounting periods and deadlines for returns and payment are:
• 1 April to 30 June 2022 accounting period. Deadline for return and payment is 29 July 2022
• 1 July to 30 September 2022 accounting period. Deadline for return and payment is 31 October 2022
• 1 October to 31 December 2022 accounting period. Deadline for return and payment is 31 January 2023
• 1 January to 31 March 2023 accounting period. Deadline for return and payment is 28 April 2023

Guidance is available on the GOV.UK collection page including information on how to complete your PPT return

Members may also find this HMRC toolkit  useful. It contains a range of information and guidance on the tax as well as a Q&A section.