Cyber alerts

Published Friday 29 September 2017 (12:00) (updated 11 January 2022)

RedBoot - Ransomware that Encrypts the Hard Drive Permanently

A newly discovered ransomware has been found to encrypt files but also alters the partition table and Master Boot Record (MBR) with the aim to cause permanent damage.

Published Monday 25 September 2017 (12:00) (updated 17 February 2020)

Retefe Banking Trojan

Retefe is a banking Trojan which has been identified targeting organisations within the UK. he malware has been around for some time, however, it has never been very prominent when compared to the likes of Dridex .

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

Elasticsearch Servers Hijacked to Host PoS Malware

During August 2017, it was discovered that a number of ElasticSearch servers had been hijacked to host Point of Sale (PoS) malware. 99% of servers infected are hosted in Amazon Web Services (AWS).

Published Friday 1 September 2017 (12:00) (updated 17 February 2020)

Russian APTs And WhiteBear Related Activity

The Russian APT group Turla has been active against defence, diplomatic and political targets, using a toolset known as WhiteBear .