Cyber alerts - NHS England Digital

Published Wednesday 22 November 2017 (12:00) (updated 17 February 2020)

Terdot Banking Trojan

Terdot is an advanced banking trojan with similarities to the ZeuS malware that is is able to collect a variety of information from both the browser and machine itself.

CC-1381 Medium

Published Thursday 4 May 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. They are listed at Cisco Security Advisories and Alerts. A remote attacker could exploit one of the vulnerabilities to cause a denial-of-service condition.

CC-1667 Low

Published Wednesday 27 September 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Update for iOS

Apple has released iOS 11.0.1 to address vulnerabilities in previous versions of iOS. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system.

CC-1636 Medium

Published Wednesday 13 September 2017 (12:00) (updated 17 February 2020)

Microsoft Releases Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of a system.

CC-1139 Low

Published Friday 3 February 2017 (12:00) (updated 17 February 2020)

HummingWhale Android Malware Discovered

A newly discovered version of the HummingBad Android malware known as HummingWhale has been identified.

CC-1202 Medium

Published Thursday 23 February 2017 (12:00) (updated 17 February 2020)

PupyRAT - A Publicly Available Remote Access Trojan

Pupy is a Remote Access Trojan that is publicly available from numerous locations including the source code repository website, GitHub.

CC-1338 Medium

Published Thursday 20 April 2017 (12:00) (updated 17 February 2020)

VMware Releases Security updates

VMware has released security updates to address vulnerabilities in Unified Access Gateway, Horizon View, vCenter Server and Workstation. Exploitation of these vulnerabilities could allow a remote attacker to take control of an affected system.

CC-1341 Medium

Published Thursday 20 April 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address several high-impact vulnerabilities affecting multiple products. These and other lower-impact vulnerabilities are listed at Cisco Security Advisories and Alerts.

CC-1682 Medium

Published Thursday 5 October 2017 (12:00) (updated 17 February 2020)

Monero Mining Malware Exploits Microsoft IIS Server 6.0

MobeRat is a newly observed remote access trojan targeting Android devices. It is being offered as-a-service to affiliates through a number of dark web forums.

CC-1719 Medium

Published Monday 23 October 2017 (12:00) (updated 17 February 2020)

Microsoft DDE Works in Outlook Too

CareCERT has previously written about Advanced Persistent Threat (APT ) groups abusing Microsoft's Dynamic Data Exchange (DDE) feature through malicious attachments