Australian Immigration Daily News

Click here to download the Victorian Stakeholder meeting notes.

Once a year Bupa reviews its premiums and benefits in line with industry standards to ensure your customers are getting great value from their cover. We have improved our Overseas Visitor Health Cover brochure to keep it simple and easy for our customers to understand. We’ve also included a full table of benefits so your customers can see exactly what they’re getting from their cover. Please click on the link below to find our latest Overseas Visitor Health Cover brochure for Working and Non-Working visas, applicable from 1st of April 2015.

http://www.bupa.com.au/staticfiles/BupaP3/pdfs/10306-OVC-Brochure-Important-Information-Guide.pdf

Please take some time to review these changes and if you have any questions, please do not hesitate to contact your Bupa representative.

A message has been received from, Innovation, Trade and Investment, Chief Minister, Treasury and Economic Development Directorat, as follows:

"As of 5 pm AEST tomorrow Friday 3 April 2015, the ACT is closing applications for the Skilled Nominated Visa (190)  from all overseas residents due to reaching our 2014-15 numbers . The ACT Government  will continue to process applications from ACT residents.

Acceptance of overseas applications,  will recommence on 1 July 2015."

Changes – updated 26 Mar 2015: http://www.comlaw.gov.au/Details/F2015L00351

Explanatory: http://www.comlaw.gov.au/Details/F2015L00351/Explanatory%20Statement/Text

457 recommendation – government response – updated 18 Mar 2015: http://www.immi.gov.au/pub-res/Pages/reviews-and-inquiries/government-response.aspx

Beware of resume emails bearing ransomware: Alert Priority High

Staysmartonline.gov.au have released information today which could affect migration agents, as people seeking to migrate to Australia will often send their CV / resume by email asking for an eligibility assessment.

You are advised to be wary of unsolicited emails purporting to attach resumes from potential job candidates. Malicious individuals are using these emails to deliver the CryptoWall 3.0 ransomware that can encrypt your files and require you to submit payment for the key to decrypt them.

The malicious emails come from a variety of addresses, including dustywarner[at]csi.com, MargaritoEverett[at]ebparks.org and SantiagoHenson[at]tom.com.

The email subject is typically ‘[first and last names of purported sender] – My resume’.

The email body generally reads:  ‘Hi, my name is [first and last names of purported sender]. I am herewith submitting my Resume under attachment for your perusal.

‘Thank you, [first name of purported sender here].

‘Attachment: [first and last names of purported sender] – My Resume.zip.’ 

A screenshot of a sample email is attached below.

 

The attachment is a .zip file which includes a single file named [first and last names of purported sender] MyResume.js. If a recipient of this email clicks on the .js file (JavaScript file), the file attempts to reach out to a list of servers and download .jpg files containing malicious executables that try to install the CryptoWall 3.0 ransomware.        

The attack appears to be targeting Australian companies and researchers indicate a new campaign may have been released on Tuesday last week.

When a user’s computer is infected with CryptoWall, the ransomware encrypts a range of file types with a strong encryption key. CryptoWall then typically displays a page to the user advising them their files have been encrypted and that they need to pay a ransom for the key to decrypt them. The message may also include a link to a website to make payment. 

It is important to note that for many victims, paying the ransom may lead to files being returned to normal. However, because you are dealing with criminals, you should be aware this is extortion and there are no guarantees you will regain access to your data. 

The criminals may not respond, they may increase their demands or they may attack you again. Unless you take preventative action, your computer will still have the same vulnerability that caused it to become infected in the first instance.

Staying safe 

Prevention is the best antidote to ransomware and other malware attacks.

Use spam filters and be cautious when opening emails, especially if there are attachments.

Make sure you are using a reputable security product.

Make sure it is up-to-date and switched on.

Make sure your operating system and applications are up-to-date.

Run a full scan of your computer—regularly.

Set and use strong and unique passwords.

Set passwords on all your hardware devices (modems and routers).                

Back up your data.

Keep a backup copy of your data in a safe place, disconnected from your computer and the internet.

Only visit reputable websites and online services.

Most up-to-date security software should identify and block ransomware. 

Recovery

The major problem with encryption based ransomware is that once your computer has become infected, the only way to recover your files is from a clean backup (if the backup has not also been encrypted) or by receiving the encryption key from the scammers.

If you have a clean back up of your data, you can use this to restore your files once you have re-established your system, free of infection.

You can also keep a copy of the encrypted files in case future events make decryption possible. Authorities may take down these ransomware gangs in the future and it might become possible to obtain the encryption key for your data.