Gulf of Guinea: Maritime Cyber Threat, The Risk of Email Phishing *Update*
11 November 2016
The Marine Domain Awareness for Trade – Gulf of Guinea (MDAT-GoG) centre has been in operation since 20 June 2016. However, in their weekly reports they advise that a number of vessels are still attempting to register with the now closed MTISC-GoG.
Members are therefore asked to ensure that they possess the correct contact details for registration with MDAT-GoG prior to entering the Voluntary Reporting Area (VRA).
Charts (SHOM 8801CSD or UKHO Q6114) should be corrected up to date and registration made through MDAT-GoG using the email address watchkeepers@mdat-gog.org.
8 July 2016
The MDAT-GoG (Marine Domain Awareness for Trade – Gulf of Guinea) has received reports of hackers in the Gulf of Guinea targeting merchant vessels in a process known as email phishing.
The process involves attempting to coerce mariners to send information that may be commercially sensitive in nature that may have implications for both the ship and the company.
The Nigerian Navy has also issued a message to all ships that are either transiting in or off Nigeria’s waters and the wider Gulf of Guinea.
A copy of one of the phishing emails is shown below:
From: Regional Coastguard [mailto:coastguard.gog@gmail.com]
Sent: Montag, 27. Juni 2016 14:38
To: xxxx
Subject: GOG Coastguards/ security alerts
Dear Vessel Owner,
The regional coastguards require the following information for your vessel: XXXX That is presently in the Gulf of Guinea regional waters:
Vessels VHF channel
Call sign
Vessel Email
This is to enable our office to give any necessary alerts to vessels while they are approaching the different ports.
RGDS
Kugo Pascal Darcy
GOG Regional Coastguard
Email: coastguard.gog@gmail.com
Members are reminded to be on alert for cyber threats, to verify the validity of all such messages and report any suspect activity to the newly formed MDAT-GoG.
MDAT-GoG contact details are as follows:
Email: watchkeepers@mdat-gog.org
Telephone: +33985228888
Calls to this number will be answered either in Brest or in Portsmouth.
For further information on cyber security, Members can look to the International Chamber of Shipping and its Guidelines on Cyber Security On-board Ships, which can be accessed by clicking here.