Cyber alerts

152 results

December 2017

CC-1885 Medium

Published Friday 29 December 2017 (12:00) (updated 17 February 2020)

Malware Trio Attacking SQL Servers

A new trio of malware with remote access capabilities has been observed.

CC-1872 Low

Published Wednesday 20 December 2017 (12:00) (updated 17 February 2020)

GnatSpy Mobile Malware

GnatSpy is a family of malware which includes threats such as VAMP and FrozenCell. This family of mobile malware targets images, text messages, contacts and call history on infected devices.

CC-1871 Low

Published Wednesday 20 December 2017 (12:00) (updated 17 February 2020)

Loapi Mobile Trojan

Loapi is modular malware that has numerous malicious capabilities. The modular architecture of the malware allows it to perform different malicious actions.

CC-1863 Medium

Published Monday 18 December 2017 (12:00) (updated 17 February 2020)

KaiXin Exploit Kit

KaiXin is an exploit kit, first identified in 2012. KaiXin has been delivered via banner ads and JavaScript injection on compromised websites.

CC-1860 Medium

Published Thursday 14 December 2017 (12:00) (updated 11 January 2022)

Napoleon Ransomware

An altered version of the Blind ransomware, known as Napoleon, has been observed using a manual attack vector to compromise systems. Unlike Blind, which targeted user-generated files only, Napoleon will encrypt all available local and remote files.

CC-1858 Medium

Published Thursday 14 December 2017 (12:00) (updated 11 January 2022)

StorageCrypt Ransomware

StorageCrypt is a new family of ransomware that targets network-attached storage (NAS) devices using SambaCry ( CVE-2017-7494 ). SambaCry allows remote attackers to execute arbitrary code on targeted systems by uploading a shared library to a writable network share, and then causing the server to load that library.

CC-1851 Medium

Published Wednesday 13 December 2017 (12:00) (updated 17 February 2020)

Simda Backdoor Trojan

Simda (AKA Rloader) is a backdoor trojan that has previously been used to create a botnet with over 770,000 infected devices across multiple countries, including the UK, USA, France and Turkey.

CC-1846 Low

Published Tuesday 12 December 2017 (12:00) (updated 17 February 2020)

Satori IoT Worm

A new variant of the Mirai botnet malware, known as Satori, has been observed using hard-coded exploits to target Internet of Things (IoT) devices.

CC-1835 Medium

Published Wednesday 6 December 2017 (12:00) (updated 17 February 2020)

Gozi ISFB Information-Stealing Trojan

The Gozi ISFB family of information-stealing trojans is designed to obtain banking credentials by recording keystrokes, browsing history, clipboard information, and details of running programs.

November 2017

CC-1828 Medium

Published Thursday 30 November 2017 (12:00) (updated 4 November 2020)

Analysis of Turla's Neuron and Nautilus Tools

An analysis of two tools, Neuron and Nautilus, used by the Turla advanced persistent threat (APT) group has been released.