Cyber alerts - NHS England Digital

CC-2858 Medium

Published Thursday 27 December 2018 (12:00) (updated 17 February 2020)

Underminer Exploit Kit

First observed in July 2017, the Underminer exploit kit has received various sophisticated updates in recent weeks.

CC-2845 Low

Published Monday 17 December 2018 (12:00) (updated 11 January 2022)

Hoax Bomb Threat Spam Advisory

Organisations worldwide, including the UK have reported receiving hoax spam emails containing bomb threats.

CC-2830 Medium

Published Thursday 6 December 2018 (12:00) (updated 17 February 2020)

EternalSilence UPnP Exploit

EternalSilence is a newly observed attack methodology that targets routers with vulnerable implementations of Universal Plug and Play (UPnP), specifically those that expose their Internet Gateway Device (IGD) controls to the Internet.

CC-2802 Medium

Published Wednesday 21 November 2018 (12:00) (updated 17 February 2020)

Cisco Expressway Restricted Call Exploit

A new attack methodology has been identified leveraging a Cisco Expressway and TelePresence denial-of-service vulnerability (CVE-2018-0358).

CC-2797 Medium

Published Tuesday 20 November 2018 (12:00) (updated 11 January 2022)

New Campaign Targeting Drupal Websites

A new attack methodology has been identified which involves the Dirty COW (CVE-2016-5195) and Drupalgeddon 2 (CVE-2018-7600) vulnerabilities present in unpatched Drupal web servers.

CC-2790 Medium

Published Wednesday 14 November 2018 (12:00) (updated 17 February 2020)

HookAds Malvertising Campaign

A new malvertising campaign known as HookAds has been observed using the Fallout exploit kit to install several other well-known malware.

CC-2768 Medium

Published Wednesday 7 November 2018 (12:00) (updated 11 January 2022)

Ransom Campaign Exploiting Open-Source Tool

A new campaign has been observed using the open-source DiskCryptor encryption tool to perform ransom attacks on targeted devices.

CC-2764 Low

Published Friday 2 November 2018 (12:00) (updated 11 January 2022)

Zombie Phishing Campaign

Zombie Phish is a newly observed phishing campaign that is using compromised email accounts to target users via conversation hijacking.

CC-2625 Medium

Published Wednesday 26 September 2018 (12:00) (updated 17 February 2020)

WordPress Tech Support Redirection Campaigns

New campaigns have been observed targeting outdated WordPress installations and related plugins to enrol affected users in technical support scams or redirect them to malicious sites.

CC-2668 Low

Published Thursday 13 September 2018 (12:00) (updated 14 December 2021)

Mongo Lock Ransom Attack

Mongo Lock is a new campaign targeting unnsecured MongoDB databases for ransom attacks