Cyber alerts - NHS England Digital

Published Thursday 29 June 2017 (12:00) (updated 17 February 2020)

GhostHook - Windows 10 Rootkit Technique

A new technique which could already be in use enables attackers to bypass Microsoft PatchGuard.

Published Wednesday 21 June 2017 (12:00) (updated 17 February 2020)

Vault 7 - Cherry Blossom

WikiLeaks has released further documentation on a tool called Cherry Blossom as a part of Vault 7. According to the leaked documentation, Cherry Blossom is a multi-purpose framework designed and developed to hack into a number of home router models.

CC-1471 Medium

Published Thursday 15 June 2017 (12:00) (updated 17 February 2020)

MacSpy

MacSpy is advertised as the 'most sophisticated Mac spyware ever' and it's free.

CC-1445 Medium

Published Wednesday 7 June 2017 (12:00) (updated 17 February 2020)

Split Tunnel SMTP Exploit

A new attack, methodology has been discovered within the way email encryption appliances operate and has been disclosed with details of how it can be exploited to bypass malware scanning at security gateways.

CC-1442 Medium

Published Thursday 1 June 2017 (12:00) (updated 17 February 2020)

Tech Support Scam Exploiting WannaCry Outbreak

A new tech support scam is using the recent WannaCry ransomware outbreak to trick users. One site uses the domain ‘securityagainstwannacry[.]com’ to appear legitimate.

CC-1382 Medium

Published Thursday 4 May 2017 (12:00) (updated 17 February 2020)

SCADA Ransomware Attack - Proof of Concept

Recent research into the possibility of attacks against SCADA (Supervisory Control and Data Acquisition) systems has resulted in a proof of concept attack being developed.

CC-1362 Low

Published Thursday 27 April 2017 (12:00) (updated 17 February 2020)

Phishing Attack Exploiting Flaw In Browsers

Security researchers have discovered a phishing attack exploiting a known vulnerability in the Chrome, Firefox and Opera web browsers to display their fake domain names as the authentic websites.

CC-1333 Low

Published Wednesday 19 April 2017 (12:00) (updated 17 February 2020)

CLDAP Used in DDoS Attacks

DDoS attacks using the CLDAP (Connectionless Lightweight Directory Access Protocol) protocol have been reported and could result in serious damage from a new reflection attack.

CC-1317 Low

Published Tuesday 11 April 2017 (12:00) (updated 17 February 2020)

Fake SEO plugin backdoors into WordPress installations

A fake SEO plugin is being used by attackers to compromise WordPress installations. The plugin is called WP-Base-SEO, and is a forgery of a legitimate search engine optimization plugin called WordPress SEO Tools.

CC-1320 Low

Published Tuesday 11 April 2017 (12:00) (updated 17 February 2020)

Sathurbot Botnet

A new botnet has been discovered compromising WordPress sites and spreads a backdoor downloader called Sathurbot.