Cyber alerts - NHS England Digital

CC-2300 Low

Published Wednesday 25 April 2018 (12:00) (updated 17 February 2020)

Gold Galleon BEC Attacks

The group behind a widespread international business email compromise (BEC) campaign have been identified.

CC-2282 Medium

Published Thursday 19 April 2018 (12:00) (updated 17 February 2020)

Early Bird Code Injection Technique

Early Bird is a new code injection technique that enables malicious users to effectively avoid anti-malware detection.

CC-2247 Medium

Published Thursday 12 April 2018 (12:00) (updated 17 February 2020)

NetSupport Manager used as Remote Access Trojan

NetSupport Manager, a legitimate remote access tool, has been observed being deployed as a remote access trojan (RAT) in malware campaigns.

CC-2193 Low

Published Wednesday 28 March 2018 (12:00) (updated 17 February 2020)

RDP Vulnerability in Windows Remote Access Tool

Microsoft’s Windows Remote Access Tool which allows remote assistance on a user's device if they are experiencing issues has a vulnerability that will allow a remote attacker to extract any file from the compromised user’s device without their knowledge.

CC-2116 Medium

Published Thursday 8 March 2018 (12:00) (updated 17 February 2020)

Memcached Exploit Amplifies DRDoS Attacks

An increase in amplified distributed reflected denial-of service (DRDoS) attacks has been observed using UDP port 11211.

CC-1941 Low

Published Wednesday 17 January 2018 (12:00) (updated 11 January 2022)

Cloud Email Ransomware

A new unnamed ransomware has been observed that targets cloud email platforms.

CC-1877 Medium

Published Thursday 21 December 2017 (12:00) (updated 17 February 2020)

ROBOT Attack

A nineteen-year-old vulnerability has been re-discovered in the RSA implementation from different vendors which will allow Man-in-the-Middle attacks on encrypted messages.

CC-1866 Low

Published Tuesday 19 December 2017 (12:00) (updated 17 February 2020)

New Attack Vector using Microsoft Access

A new attack vector that utilises Microsoft Access macros feature has been discovered. An executable file is created through Microsoft Access,

CC-1861 Low

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

Mailsploit Emailing Spoofing

Mailsploit is a new way to easily spoof email addresses when sending emails. It allows the attacker to display any email address as the from address to the email recipient by modifying the header of the email.

CC-1809 Low

Published Thursday 23 November 2017 (12:00) (updated 17 February 2020)

Fake Anti-Virus Pages Used in Phishing Attack

A new type of phishing attack deception technique has been observed where malicious actors style webpages to present themselves as an anti-virus company.