To:

NASA HQ IT POC’s.   Please distribute as appropriate.

Subject:

Adobe PDF IT Security Threat

What’s Happening:

Multiple groups are currently attempting to gain unauthorized access to agency computers. This attack is triggered by simply opening a malicious PDF file using Adobe Acrobat or Reader and requires no other user interaction.

HQ users are largely protected against this threat as Javascript functionality specific to Adobe PDF files has been disabled on NASA-issued computers.  However caution is still advised and it’s important that users do not reverse this setting.

What You
Should Do:

1)      Do not open suspicious or unrequested PDF files sent to you in your e-mail. 

2)      If, in the course of using Adobe Acrobat or Adobe Reader, you receive a pop-up window asking if you would like to re-enable Javascript, click “No.”   If you accidentally click “Yes,” please contact the Enterprise Service Desk (ESD) immediately to have Javascript disabled again.

3)      Consider disabling Javascript on your home computer, following the instructions provided in the NASA Security Operations Center (SOC) Bulletin entitled Ongoing Malicious Adobe PDF Attacks Against Users.

4)      Forward suspected phishing e-mails to the NASA SOC at soc@nasa.gov.

Learn More:

Read the latest NASA SOC General Security Bulletin:  Ongoing Malicious Adobe PDF Attacks Against Users.

Support:

Enterprise Service Desk (ESD):  Call 358-HELP (4357) or 1-866-4NASAHQ (462-7247) or send an e-mail.