Cyber alerts

89 results

February 2017

Published Thursday 23 February 2017 (12:00) (updated 6 September 2021)

Hacker Breaches Over 60 Universities and Other institutions

A financially motivated hacker known as ‘Rasputin’ has reportedly breached and stolen data from over 60 prominent universities in the UK and the US.

CC-1204 Low

Published Thursday 23 February 2017 (12:00) (updated 17 February 2020)

IoT Botnet Attacks Own Network

Security researchers have reported that a US based university suffered a DDoS attack from its own network of Internet of Things (IoT) devices which had been infected with malware.

CC-1160 Medium

Published Thursday 9 February 2017 (12:00) (updated 17 February 2020)

Remote Denial Of Service Zero-Day Code Gets Public Release

A Zero-day vulnerability left unpatched by Microsoft for 3 months has been publically released by a researcher prior to the release of a patch.

January 2017

CC-1114 Medium

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

APT Group Carbanak Uses Public Cloud Services as Command and Control Server

Google services are being used as a Command and Control (C2) server for Carbanak group’s malware, which spies on data and escalates privileges within the user’s infrastructure.

CC-1093 Low

Published Thursday 19 January 2017 (12:00) (updated 17 February 2020)

Attacks on CPUs from USB port

Studies have found that Intel CPUs (Central Processing Unit) containing a debugging interface is accessible via USB 3.0 allowing the attacker to gain full control of the machine.

CC-1092 Medium

Published Thursday 19 January 2017 (12:00) (updated 17 February 2020)

Social Engineering Targeting

Attackers are setting up email accounts registered on webmail services such as Hotmail in the name of an employee at a CCG/GP practice or supplier.

CC-1068 Low

Published Thursday 12 January 2017 (12:00) (updated 17 February 2020)

Mac Tech Support Scam

Technical support scams have been in operation for many years. They come in a number of guises and change regularly in order to remain a threat. A newly registered scam website targeting Mac users was identified towards the end of 2016.

CC-1064 Low

Published Thursday 12 January 2017 (12:00) (updated 17 February 2020)

MongoDB Servers Targeted in Ransom Attacks

MongoDB is an open source database application with a default configuration that does not have any security features enabled. Ransom attacks are targeting MongoDB installations that are reachable from the internet.

CC-1039 Low

Published Tuesday 3 January 2017 (12:00) (updated 17 February 2020)

New Phishing Delivery Method

A new technique is being used in a phishing campaign designed to steal banking data with the help of leveraging tactics associated with malware.