Cyber alerts - NHS England Digital

Published Monday 7 March 2022 (02:50) (updated 7 March 2022)

Phishing Campaign Uses Fake Adobe Document Cloud Application to Steal Microsoft Credentials

A cyber crime group is using a fake web application masquerading as the Adobe Document Cloud in order to steal credentials for Microsoft Office 365 and Outlook.

CC-2989 Low

Published Thursday 21 March 2019 (12:00) (updated 14 February 2020)

CUJO Releases Security Update for Smart Firewall Vulnerabilities

CUJO have released an update to address a vulnerability in its Smart Firewalls. The success exploitation of these vulnerabilities will allow malicious actors to remotely execute code without any form of authentication.

CC-2845 Low

Published Monday 17 December 2018 (12:00) (updated 11 January 2022)

Hoax Bomb Threat Spam Advisory

Organisations worldwide, including the UK have reported receiving hoax spam emails containing bomb threats.

CC-2764 Low

Published Friday 2 November 2018 (12:00) (updated 11 January 2022)

Zombie Phishing Campaign

Zombie Phish is a newly observed phishing campaign that is using compromised email accounts to target users via conversation hijacking.

CC-2668 Low

Published Thursday 13 September 2018 (12:00) (updated 14 December 2021)

Mongo Lock Ransom Attack

Mongo Lock is a new campaign targeting unnsecured MongoDB databases for ransom attacks

CC-2622 Low

Published Wednesday 22 August 2018 (12:00) (updated 17 February 2020)

USBHarpoon USB-based Attack

Security researchers have created a process for producing malicious USB charging cables. Known as USBHarpoon, it adapts a previous technique for performing USB-based attacks called BadUSB.

CC-2523 Low

Published Tuesday 3 July 2018 (12:00) (updated 11 January 2022)

RAMpage: ARM-based DRAM Attack

A new attack targeting modern Android-based devices has been detailed in a research paper. Known as RAMpage, the authors of the paper claim it can be used to gain unauthorised access to a targeted device.

CC-2519 Low

Published Thursday 28 June 2018 (12:00) (updated 17 February 2020)

Windows 10 Settings Shortcut Vulnerability

A vulnerability has been uncovered in Microsoft Windows 10 that allows users to create shortcuts that can execute malicious code on the affected machine whilst bypassing security features.

CC-2481 Low

Published Wednesday 13 June 2018 (12:00) (updated 17 February 2020)

Spam Campaign Using the IQY Extension

A new spam campaign has been observed using attachments containing Excel Web Query ( .iqy ) files.

CC-2371 Low

Published Thursday 10 May 2018 (12:00) (updated 17 February 2020)

Office 365 Email baseStriker Vulnerability

A vulnerability named baseStriker has been discovered in Office 365 which allows threat actors to deliver malicious emails.