Cyber alerts - NHS England Digital

Published Thursday 6 April 2017 (12:00) (updated 17 February 2020)

Gh0stRAT Remote Access Trojan

Gh0stRAT is a remote access trojan affecting Windows platforms and has been used to hack into some of the most sensitive computer networks in the world. It is generally distributed via spam emails.

CC-1779 Medium

Published Tuesday 14 November 2017 (12:00) (updated 17 February 2020)

Black Friday and Cyber Monday

Black Friday (last Friday of November) and Cyber Monday (the following Monday) are two of the biggest online shopping days of the year, with both posing a possible risk of cyber-attacks and disruption aimed at consumers.

CC-1244 Medium

Published Wednesday 8 March 2017 (12:00) (updated 17 February 2020)

DNSMessenger - C2 Commands via DNS TXT record

A new Remote Access Trojan (RAT) has been discovered that downloads PowerShell commands stored inside a domain’s DNS TXT record. This makes it difficult to defend against, as DNS is required to resolve IP addresses to domain names.

CC-1241 Medium

Published Wednesday 8 March 2017 (12:00) (updated 17 February 2020)

Betabot Botnet

Betabot (also known as Neurevt) is a botnet that originated as a banking trojan /password stealer and evolved over time with new functionality. Infected hosts are leveraged to distribute malware.

CC-1633 Medium

Published Tuesday 12 September 2017 (12:00) (updated 17 February 2020)

Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities

An independent researcher has identified eight vulnerabilities in the Smiths-medical Medfusion 4000 Wireless Syringe Infusion Pump.

CC-1871 Low

Published Wednesday 20 December 2017 (12:00) (updated 17 February 2020)

Loapi Mobile Trojan

Loapi is modular malware that has numerous malicious capabilities. The modular architecture of the malware allows it to perform different malicious actions.

CC-1205 Low

Published Thursday 23 February 2017 (12:00) (updated 17 February 2020)

App-in-the-Middle attack bypasses Android for Work secure framework

Google’s enterprise mobility tool, formerly known as “Android for Work”, has 2 features that could allow an attacker to access data that should be protected by its sandboxed work environment.

CC-1710 Low

Published Thursday 19 October 2017 (12:00) (updated 17 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 62.0.3202.62 for Windows, Mac, and Linux to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

CC-1726 Low

Published Wednesday 25 October 2017 (12:00) (updated 17 February 2020)

Hacker's Door RAT

Researchers have found that the Remote Access Trojan (RAT) called "Hacker's Door" has reappeared in active investigations after being dormant since 2004-2005.

CC-1581 Medium

Published Wednesday 16 August 2017 (12:00) (updated 17 February 2020)

GlobeImposter Ransomware

GlobeImposter is a family of ransomware targeting financial and government organisations across Western Europe and North America.