Cyber alerts - NHS England Digital

Published Wednesday 24 May 2017 (12:00) (updated 17 February 2020)

LokiBot Information Stealing Trojan

A new variant of Loki Bot has been discovered. Loki Bot has been active since at least 2014 and is known for harvesting credentials. Loki embeds itself in PDF files to steal credentials from software on a victim's system.

CC-1405 Medium

Published Thursday 11 May 2017 (12:00) (updated 17 February 2020)

Mozilla Releases Security Updates

Mozilla has released security updates to address a vulnerability in Firefox and Firefox ESR. An attacker could exploit this vulnerability to take control of an affected system.

CC-1807 Low

Published Thursday 23 November 2017 (12:00) (updated 17 February 2020)

Malicious Apps on the Google Play Store

Recent reports regarding the Google Play Store suggest a new influx of malicious software disguised as legitimate applications.

CC-1232 Low

Published Thursday 2 March 2017 (12:00) (updated 17 February 2020)

Qadars V3 Camouflaged as Adobe Flash Player Installer

A recent campgain has seen an updated version of the Qadars banking trojan being distributed by mimicking an Adobe Flash update.

CC-1268 Low

Published Thursday 16 March 2017 (12:00) (updated 17 February 2020)

RawPOS Malware

A new variant of RawPOS has been discovered. RawPOS was first discovered in 2008 and is a highly configurable, multi-stage memory scraper. The new variants modification is making the malware undetectable.

CC-1688 Low

Published Friday 6 October 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Update for macOS High Sierra

Apple has released a supplemental security update to address vulnerabilities in macOS High Sierra 10.13. An attacker could exploit these vulnerabilities to obtain sensitive information.

CC-1544 Medium

Published Thursday 27 July 2017 (12:00) (updated 17 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 60.0.3112.78 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that, if exploited, may allow an attacker to take control of an affected system.

CC-1631 Low

Published Monday 11 September 2017 (12:00) (updated 17 February 2020)

Dragonfly 2.0

Dragonfly is a Russian-speaking Advanced Persistent Threat APT group that has been active since 2011 and have recently been observed targeting companies in the US and Europe.

CC-1615 Low

Published Thursday 31 August 2017 (12:00) (updated 17 February 2020)

Cisco Smart Net Total Care SQL Injection Vulnerability

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Contracts Details Page could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack.

CC-1342 Medium

Published Thursday 20 April 2017 (12:00) (updated 17 February 2020)

Mozilla Releases Security Updates

Mozilla has released security updates to address a vulnerability in Firefox and Firefox ESR. An attacker could exploit this vulnerability to take control of an affected system.