PNG Cyber Safety

25/08/2026

AWARENESS | Don't Accept Every Friend Request

When using social media, do not accept every friend or follow request you receive. Allowing people you do not know to access your personal social media accounts can expose your private information, make you vulnerable to online stalking, scams, harassment, or other forms of cyber abuse.

Before accepting a friend or follow request, always make sure that:

1. You know the person
Ask yourself whether the person is actually a friend, relative, colleague, or someone you know. Think twice before giving a complete stranger access to your personal life.

2. Check your mutual friends
Look at your mutual connection. Having genuine mutual friends can help you determine whether the person is someone you may actually know.

3. Check the account carefully
Look for a clear profile picture, a genuine-looking name, account history, posts, and other information that can help confirm the account is legitimate. Be cautious of accounts that appear newly created, have very little information, or use suspicious photos.

4. Don't accept suspicious requests
If the account looks suspicious, unfamiliar, or you cannot verify who the person really is, do not accept the request. You can also block or report the account if necessary.

Not everyone on social media needs to be connected to you. Only accept requests from people you know or can confidently verify.

Verify before you accept. Protect your personal information. Protect your identity.

Follow our WhatsApp Channel: https://whatsapp.com/channel/0029VayYT9U9MF91wtgea526 See less

20/08/2026

ALERT | Fake BSP Independence Giveaway.

Members of the public are advised to be cautious of a suspicious link currently being circulated via WhatsApp claiming to offer an Independence Day cash giveaway from BSP.

The link directs users to a website promoting a fake cash giveaway and misuses BSP’s branding to appear legitimate. BSP has confirmed that the promotion is fake and is being used by scammers to deceive members of the public.

Members of the public are strongly advised not to click on the link, provide personal information or banking credentials such as passwords, PINs or bank details, or follow any further links provided through the promotion.

BSP customers, and members of the public are also encouraged to verify information before clicking on or sharing links. For legitimate information regarding BSP services and announcements, always check BSP’s official website and official social media pages, or contact BSP directly through its official communication channels. Do not rely on messages or links circulated through WhatsApp or other social media platforms without first confirming their authenticity.

Stay alert! Think before you click! Protect your personal information online!

Follow our WhatsApp Channel: https://whatsapp.com/channel/0029VayYT9U9MF91wtgea526

11/08/2026

AWARENESS | Keep an Eye on What Children Do Online

Children and young people are spending more time on phones and social media. Some are posting photos, videos, personal information and other content without fully understanding the risks.

Parents, teachers and anyone who looks after children, take an active interest in what they do online.

Children under 18 can easily become targets of:
- Online bullying and hurtful comments
- Fake accounts and people pretending to be someone else
- Pressure to share private photos or information
- Scams and harmful links
- Inappropriate content and strangers contacting them

Online bullying can affect a child’s confidence, school life, friendships and emotional wellbeing. What may look like a simple comment or joke online can have a serious impact on a young person.

Talk to your children. Check in with them. Teach them to think before they post, share or respond.

If something makes them uncomfortable, encourage them to speak up and tell a trusted adult.

A phone is a tool, but children need guidance to use it safely.

Stay Smart. Stay Safe. Stay Secure. - PNG

Follow our WhatsApp Channel: https://whatsapp.com/channel/0029VayYT9U9MF91wtgea526

05/08/2026

ALERT | Beware of Fake NSO Recruitment Links

The National Statistical Office (NSO) has warned citizens to be cautious of fraudulent recruitment advertisements circulating online using its name.

Members of the public are advised to be alert as scammers may impersonate government agencies, organizations, or reputable companies to trick individuals into providing personal information through fake job application portals.

Do not click on suspicious recruitment links or submit personal details unless the opportunity has been verified through the organization’s official communication channels and websites. Always check the source, verify the website address, and remain alert for signs of online job scams.

Stay Smart. Stay Safe. Stay Secure. – PNG

Follow our WhatsApp Channel: https://whatsapp.com/channel/0029VayYT9U9MF91wtgea526

05/08/2026

ADVISORY | Active Exploitation of N-able N-central Vulnerabilities (CVE-2026-18556 & CVE-2026-18577)

Alert Status: HIGH

The National Cyber Security Centre (NCSC), advises all Papua New Guinea Government agencies, critical infrastructure operators, and organizations of the active exploitation of two critical vulnerabilities affecting the N-able N-central Remote Monitoring and Management (RMM) platform.

N-able confirmed on 1 August 2026 that attackers are actively exploiting these vulnerabilities to bypass authentication, compromise administrator accounts, and gain unauthorized remote access. An emergency security update (Version 2026.3.1.7) has been released to address both vulnerabilities.

Affected Systems
- Hosted and On-Premises N-able N-central deployments (Europe, Americas, APAC)
- All versions prior to 2026.3.1.7

Potential Impact
Successful exploitation may allow attackers to:
- Bypass authentication and take over administrator accounts.
- Abuse the Take Control remote access feature.
- Move laterally across managed endpoints.
- Establish persistent access.
- Conduct Active Directory reconnaissance.
- Disable or interfere with security controls.
While no ransomware or data exfiltration has been confirmed, organizations should assume systems may be at risk if unpatched.

Indicators of Compromise (IOCs)
Monitor for:
- Unexpected remote access tools such as AnyDesk, TeamViewer, RustDesk, TacticalRMM, SimpleHelp, or HopToDesk.
- svchost.exe running from a user's Documents folder.
- Renamed Cloudflare Tunnel binaries (e.g. MicrosoftEdgeUpdate64.exe, msmp.exe).
- Unexpected privileged or Domain Administrator accounts.
- Unusual administrative logins or remote support sessions.
- Connections to the following IP addresses:
 173.249.252.200
 87.249.138.34
 37.19.210.32
 37.153.90.88
 92.118.112.181
 68.235.46.214

Immediate Recommended Actions
1. Upgrade immediately to N-central Version 2026.3.1.7 or later.
2. Review administrative accounts and privileged activity.
3. Hunt for Indicators of Compromise (IOCs).
4. Review security, firewall, proxy, and EDR logs.
5. Strengthen security controls and monitoring.
6. If compromise is suspected:
 Isolate affected systems.
 Preserve forensic evidence.
 Reset compromised credentials.
 Conduct a full investigation.
 Notify the National Cyber Security Centre (NCSC).

Due to confirmed active exploitation, organizations using N-able N-central should treat this advisory as high priority and complete patching, threat hunting, and compromise assessments without delay. Prompt action is essential to protect systems, networks, and critical infrastructure across Papua New Guinea.

04/08/2026

VIDEO | Beware of Quishing (QR Code Phishing)

A single scan can put your personal information and money at risk.

Watch our latest cyber awareness video to learn what Quishing (QR Code Phishing) is, how scammers use fake QR codes, and the simple steps you can take to stay protected.

🎥Watch now: https://youtu.be/9fY5ZP3_ctY

If you found this video helpful, please like, share, and subscribe to our YouTube channel to help spread cyber safety awareness across Papua New Guinea.

Stay Smart. Stay Safe. Stay Secure – PNG. 🇵🇬

14/07/2026

VIDEO | Defamation of Character Online

Think before you post, share, or comment. Online words can have real-world consequences.

Watch our latest cyber awareness video on Defamation of Character and learn how to protect yourself and others from harmful online content.

🎥Watch now: https://youtu.be/N5TCQbyOfFQ

Don’t forget to like, share, and subscribe to our channel for more cyber safety awareness content.

Stay Smart. Stay Safe. Stay Secure – PNG 🇵🇬

13/07/2026

AWARENESS | Beware of Insider Threats

Not all cyber threats come from outside. Sometimes, risks can come from within an organization through employees, contractors, or trusted individuals who have access to systems and information.

An insider threat occurs when someone with authorized access accidentally or intentionally compromises security. This can happen through careless actions, such as sharing passwords, clicking on suspicious links, sending sensitive information to the wrong person, or failing to protect confidential data. It can also involve malicious activities, such as stealing information, abusing access privileges, or leaking government or company data.

Stay alert and help protect your organization:

- Protect your passwords and never share your login details.
- Only access information required for your work.
- Report suspicious activities, unusual system behavior, or unauthorized access.
- Be careful when handling sensitive documents and data.
- Think before sharing information online or through email.

Cybersecurity is everyone’s responsibility. Trust is important, but awareness and accountability help keep our systems, data, and people safe.

Stay Smart. Stay Safe. Stay Secure.

Subscribe to our YouTube Channel: www.youtube.com/

30/06/2026

AWARENESS | Keep Your Devices Updated

Your phone, computer, and apps need regular updates to stay safe.

Updates don't just add new features; they also fix security problems that hackers can use to break into your device.

If you ignore updates, your device becomes an easy target. Cybercriminals may steal your personal information, install harmful software, or even take control of your device.

Stay safe by following these simple tips:
- Turn on automatic updates.
- Update your phone, computer, and apps as soon as updates are available.
- Only download updates from official sources.
- Restart your device if asked to complete the update.

Remember:
An updated device is a safer device. Don't ignore update notifications, they help protect you from cyber threats.

Subscribe to our YouTube Channel: www.youtube.com/

25/06/2026

AWARENESS | Online Scammers

Don’t let scammers fool you. Real prizes don't ask for money upfront, if they do, it’s a scam. Stay alert, verify before you trust, and help us stop online scams.

Watch and Subscribe.

Don’t let scammers fool you.Real prizes don't ask for money upfron...