{
	"id": "25fddf39-36f9-496f-913f-aa0f60a2abe1",
	"created_at": "2026-04-06T00:17:51.556372Z",
	"updated_at": "2026-04-10T03:21:57.238996Z",
	"deleted_at": null,
	"sha1_hash": "92f526a00eed21451d89f2a7a9e0358bd7ab95c3",
	"title": "Information on GovCERT",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 47482,
	"plain_text": "Information on GovCERT\r\nBy Federal Department of Defence, Civil Protection and Sport DDPS\r\nArchived: 2026-04-05 19:07:22 UTC\r\nInformation on GovCERT\r\nThe Government Computer Emergency Response Team (GovCERT) is the national specialist service responsible\r\nfor the technical management of cyberincidents and technical analysis of cyberthreats. It supports critical\r\ninfrastructure operators, the public sector and the Swiss business location with technical information on current\r\ncyberthreats and with the management of cyberincidents. GovCERT also works in close collaboration with the\r\npolice authorities. This cooperation covers both the exchange of information and support with technical analyses.\r\nTo ensure the timely exchange of information on cyberthreats, GovCERT works with other CERTs and CSIRTs\r\n(computer security incident response teams) worldwide. In addition, GovCERT is a member of various recognised\r\ninternational organisations.\r\nBlog and white papers\r\nList of blocked file types\r\nInternational cooperation\r\nContacts\r\nGovCERT on Twitter/X\r\nBlog and white papers\r\nOver the years, GovCERT has published a variety of blogs, white papers (technical reports) and other\r\ndocumentation on cyberthreats (previously on www.govcert.ch).\r\nThese documents will now be published on GitHub:\r\nList of blocked file types\r\nGovCERT publishes a list of file types that are often used to distribute malware by email, and recommends that\r\nthese be proactively blocked at the email gateway or spam filter, or placed in quarantine.\r\nInternational cooperation\r\nIn the joint fight against cyberthreats, international cooperation is very important. Membership in various\r\nassociations enables GovCERT to establish a global network of personal relationships. GovCERT is a member of\r\nFIRST (Forum of Incident Response and Security Teams, www.first.org), of the European Government CERTs\r\n(EGC) group (www.egc-group.org) and of the International Watch and Warning Network (IWWN). In addition,\r\nGovCERT has accreditation from the European Trusted Introducer (TI) Service.\r\nhttps://www.govcert.admin.ch/blog/35/reversing-retefe\r\nPage 1 of 2\n\nContacts\r\nReports on cyberincidents from critical infrastructures\r\nReports on cyberincidents from critical infrastructures or cybersecurity specialists can be sent to GovCERT at the\r\nfollowing email address:\r\nincidents[at]govcert{dot}ch\r\nTechnical queries\r\nOther technical queries that do not concern a specific cyberincident can be sent to GovCERT at the following\r\nemail address:\r\noutreach[at]govcert{dot}ch\r\nEncryption Keys\r\nThese two GovCERT mailboxes support PGP and S/MIME, which allow secure and phishing-resistant email\r\ncommunication. The\r\ncorresponding keys can be found here:\r\nExpectations for cyberincident management\r\nGovCERT publishes the expectations for cyberincident management in accordance with RFC 2350 (\"Expectations\r\nfor Computer Security Incident Response\"):\r\nGeneral reports on cyberincidents \r\nGeneral reports on cyberincidents can be sent to the NCSC using the web form. This helps the NCSC to identify\r\npotential online threat trends and take targeted action to combat them:\r\nNCSC reporting form\r\nGovCERT on Twitter/X\r\nSource: https://www.govcert.admin.ch/blog/35/reversing-retefe\r\nhttps://www.govcert.admin.ch/blog/35/reversing-retefe\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia",
		"ETDA"
	],
	"references": [
		"https://www.govcert.admin.ch/blog/35/reversing-retefe"
	],
	"report_names": [
		"reversing-retefe"
	],
	"threat_actors": [],
	"ts_created_at": 1775434671,
	"ts_updated_at": 1775791317,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/92f526a00eed21451d89f2a7a9e0358bd7ab95c3.pdf",
		"text": "https://archive.orkl.eu/92f526a00eed21451d89f2a7a9e0358bd7ab95c3.txt",
		"img": "https://archive.orkl.eu/92f526a00eed21451d89f2a7a9e0358bd7ab95c3.jpg"
	}
}