It’s National “If You See Something, Say Something®” Awareness Day; Beware of Human Resources Phishing Emails; FCC Chair Says Chinese Firms Quectel, Fibocom Pose National Security Risk

The New Jersey Office of Homeland Security and Preparedness, in support of the U.S. Department of Homeland Security’s national “If You See Something, Say Something®” Awareness Day, is reminding the public to be aware of and report suspicious activity every day. For this year’s theme, DHS is encouraging the public to make a “Pledge to Protect” communities by being ready to report suspicious activity to local authorities. To drive home the importance of the month-long campaign in New Jersey, NJOHSP implemented several “See Something, Say Something” initiatives during the past year.

These include:

• An aerial banner campaign at Jersey Shore beaches and event venues from Cape May to Sandy Hook to northern New Jersey.
• Adding QR codes to a variety of marketing products for smartphone users to quickly download and save NJOHSP’s suspicious activity reporting contact information to their phones.
• Launching a public safety campaign Sept 1., in partnership with the New Jersey Department of Transportation and the New Jersey Turnpike Authority, that includes Variable Message Signs reminding drivers along the state’s major interstates to remain vigilant and report potential threats and suspicious activity related to terrorism or other criminal activity.
• The creation of a marketing video, featuring iconic New Jersey landscapes and overlay cutouts of an individual using binoculars to conduct surveillance.

NJOHSP encourages the public to familiarize themselves with the 15 suspicious activity indicators found at NJOHSP.gov and immediately report any suspicious activity to local law enforcement or to NJOHSP’s Counterterrorism Watch Desk by calling 866-4-SAFE-NJ or emailing tips@njohsp.gov.

The New Jersey Cybersecurity and Communications Integration Cell observed phishing campaigns purporting to come from Human Resources departments from U.S. and non-U.S. top-level domains as threat actors continue their efforts to target distracted users. The messages masquerade as acknowledgements of updated employee handbooks to harvest account credentials and other sensitive information. Recent activity correlates with blocked emails sent to New Jersey State employees and similar reports of targeting stemming from higher education organizations across the U.S. The NJCCIC advises organizations to conduct phishing tests at regular intervals and use simulation measures to ensure users retain their ability to identify phishing emails correctly. The NJCCIC also urges users to confirm HR requests with their organization’s HR representative and refrain from responding to unsolicited communications, clicking links or opening attachments in suspicious emails. For addtional information, visit the NJCCIC website.

The head of the Federal Communications Commission reportedly asked U.S. government agencies Sept. 1 to consider labeling Chinese firms Quectel and Fibocom Wireless, both of which produce cellular components that enable internet of things devices to connect to the internet, as national security threats. On behalf of lawmakers, FCC Chairperson Jessica Rosenworcel made the request to the FBI, the Department of Justice, the National Security Agency and the Department of Defense to add the two companies to the FCC’s “Covered List.” The list includes communications equipment and services that pose an unacceptable risk to national security. Organizations cannot use federal funds to purchase equipment from companies on the list, and the FCC will not authorize new equipment from companies considered national security threats. Members of the Select Committee on the Chinese Communist Party warned that China could remotely access and control U.S. medical equipment, vehicles and farm equipment using Chinese cellular components and exfiltrate data or shut down devices. Citing national security concerns, the FCC in 2022 barred Chinese telecom companies from operating on U.S. networks, including China Unicom’s U.S. unit, Pacific Networks and ComNet.