Cyber alerts - NHS England Digital

Published Wednesday 31 May 2017 (12:00) (updated 17 February 2020)

Archimedes - Malware Platform

Leaked documentation has revealed a hacking tool known as Archimedes.

Published Wednesday 3 May 2017 (12:00) (updated 17 February 2020)

FalseGuide Android Malware

Security researchers have recently identified new mobile malware hidden in more than forty fake game guide applications hosted on the Google Play store.

CC-1415 Low

Published Wednesday 17 May 2017 (12:00) (updated 17 February 2020)

SLocker Android Ransomware

The SLocker Android ransomware is back with a new wave of infections. The identified new infections were previously undetected and unreported.

CC-1611 Low

Published Thursday 31 August 2017 (12:00) (updated 17 February 2020)

Shadowpad Backdoor Discovered in NetSarang Software

A backdoor known as 'Shadowpad' has been discovered in NetSarang server management software.

CC-1230 Medium

Published Thursday 2 March 2017 (12:00) (updated 17 February 2020)

Ransom Attacks on Databases Rise

There has been a rise in databases being the target for ransom attacks, with the latest target being MYSQL databases with weak credentials.

CC-1229 Low

Published Thursday 2 March 2017 (12:00) (updated 17 February 2020)

SHA1 SHAttered

Researchers have announced the first proven collision of a Secure Hash Algorithm (SHA) 1 hash. Two PDF documents with completely different content both result in the same SHA1 hash when calculated.

CC-1131 Medium

Published Thursday 2 February 2017 (12:00) (updated 17 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 56.0.2924.76 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that, if exploited, may allow an attacker to take control of an affected system.

CC-1646 Medium

Published Wednesday 20 September 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker may exploit some of these vulnerabilities to take control of an affected system.

CC-1789 Medium

Published Thursday 16 November 2017 (12:00) (updated 17 February 2020)

LockCrypt Ransomware

LockCrypt is a new server-focused ransomware with similarities to the Satan ransomware-as-a-service . It reportedly infects targets via a Remote Desktop Protocol (RDP) brute-force attack and has targeted smaller businesses in the USA, UK, India, South Africa and the Philippines.

CC-1114 Medium

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

APT Group Carbanak Uses Public Cloud Services as Command and Control Server

Google services are being used as a Command and Control (C2) server for Carbanak group’s malware, which spies on data and escalates privileges within the user’s infrastructure.