Faith-Based Daily Awareness Post 1 April 2025

These updates are shared to help raise the situational awareness of Faith-Based organizations to best defend against and mitigate the impacts from all-hazards threats including physical security, cybersecurity, and natural disasters.    

Upcoming FB-ISAO Event: Standing Up Teams 

• Date: 02 April 2025 
• Time: 12pm ET 
• Register Here. 
• Non-members register Here. 

For various reasons, many houses of worship are devoid of a formal security team. Though that is a difficult reality, there are things that can be done to help enhance your organization’s security posture, even with limited resources. This session will explore ideas around a bottom-up approach to protecting the house of worship and its members, investing in skills to beef up the sole practitioner’s knowledge and skills, and considering ways to leverage community-based resources. Most importantly, this session will help members with attaining the  perspective and support needed to not burn out! For more information on Standing Up Teams visit FB-ISAO Standing up Teams. 

FB-ISAO: Threat Levels Remain Elevated 

The FB-ISAO Cyber Threat Intelligence and Operational Resilience (together, the Threat and Incident Response) working groups actively monitor and share information, reports, and perspective regarding our threat environment. In addition to our continued observance of abroad array of general threats and hostility to people and places of faith, we have reviewed the ongoing events and threats relating to the ongoing conflict in Israel and Gaza and the related activities internationally and domestically. Based on that assessment, we have determined to maintain both the Physical and Cyber Threat Levels at “ELEVATED.”  

We continue to have concerns over the widespread acts of hostility and open threats to faith-basedorganizations based on their religious identity and political beliefs – (including antisemitism, islamophobia, anti-Christian, anti-Hindu and anti-Sikh sentiment, etc.), which can be heightened in this period of major holidays for many religions around the world. 

Religiously targeted acts of violence such as arson, vandalism, and low-level attacks including swatting and bomb threats continue to occur. Globally, there has also been a renewed proliferation of vehicle ramming attacks, several surrounding religious events and celebrations. With the change of the U.S. Presidential Administration, we have seen new authority for ICE agents to enter houses of worship, protestors be detained (sometimes under vague allegations), and a federal government workforce put on edge, which includes a scale back of personnel who were charged with protecting the homeland. In this environment we’ve seen increased threats to prominent figures such as judges and corporate executives, support to those who have conducted attacks, and public rhetoric approving of acts of violence, which all suggest an increasing acceptance across society of violence to solve issues. 

Analyst Comments: To read more about the FB-ISAO current threat level you can find it here. 

National Weather Service: Tracking a Significant Spring Storm Impacting the Central U.S. This Week 

The National Weather Service highlights significant weather events this week like flash flooding, winter storm, fire weather, and the temperature outlook. A major spring storm will move across the central U.S. and into the Great Lakes by Thursday. The northern Plains and Upper Midwest will experience heavy snow and blowing snow, while severe thunderstorms are forecast for the southern Plains and Midwest. Additionally, a multi-day excessive rainfall and flooding event is expected from the Ozarks to the Ohio Valley, lasting from Wednesday through Saturday.   

Analyst Comments: As this significant spring storm tracks across the central U.S. it is crucial to consider not only the immediate impact on individuals but also the safety of important communities spaces. The storm’s severe weather component includes the risk of strong wings, hail, and even tornadoes. It is important to review emergency plans, have designated safe rooms, and secure structures that outdoors. As always the FB-ISAO resource library has resources on protecting from natural hazards. 

Evolution of Sophisticated Phishing Tactics: The QR Code Phenomenon 

The rising threat of QR code phishing, or quishing, which has become a more sophisticated method of phishing attacks has become a challenge. Attackers embed malicious URLs within QR codes that look like legitimate documents from services like DocuSign or Adobe Acrobat Sign. When scanned, these codes lead victims to phishing websites, where they unwittingly expose personal information.  

Key points: 

• QR code phishing: This tactic bypasses traditional security tools by directing victims to phishing sites through QR codes scanned on personal devices, which typically have weaker security. 
• URL redirection: Attackers use URL redirection techniques, often exploiting legitimate websites, to mask malicious links and make them appear trustworthy. 
• The attacks target a variety of sectors, including finance, education, healthcare, and automotive. 

Analyst Comments: The rise of QR phishing marks a significant shift in phishing tactics, as attackers increasingly exploit the convenience and widespread adoption of QR codes to bypass traditional security measures. The growth of QR code phishing underscores the increasingly creativity of cybercriminal, highlighting the need for evolving security measures. Users and organizations must remain vigilant, and security systems need to adapt to detect and mitigate QR code-based attacks. We encourage FB-ISAO members to help raise awareness of trending threats to help ensure the community stays resilient. 

Where Wrongful Detention is on the Rise 

There is increasing case of wrongful detention of U.S. citizens abroad in 2024, 54 Americans were wrongfully detained in 17 countries, with a notable rise in such incidents since 2015. Most detentions are legal, but a small percentage involve hostage-taking or illegitimate reasons. 

The Levinson Act provides a framework for identifying and responding to wrongful detentions, which are defined by several criteria, including if the detainee is held for political reasons or in violation of their rights. Exit bans, where individuals cannot leave a country but are not formally detained, are also counted as wrongful detentions by some organizations. The report calls attention to growing issue of wrongful detentions and the complexities surronding their identification and resolution.  

Analyst Comments: While detentions are a growing concern, they are also a reflection of broader geopolitical dynamics and evolving legal challenges. Addressing this issue requires a multi-faceted approach, including better international legal frameworks, stronger diplomatic ties, and more comprehensive support systems for those detained abroad. To learn more about this threat, please see the FB-ISAO Weekly Report from 19 December, 2024.