Cyber alerts - NHS England Digital

Published Thursday 16 March 2017 (12:00) (updated 17 February 2020)

ELF_IMEIJ.A the DDoS Malware

A new malware targeting Linux-based Internet of Things (IoT) devices known as ELF_IMEIJ.A targets vulnerabilities identified in surveillance cameras produced by the company AVTech to carry out DDoS attacks.

CC-1300 Low

Published Thursday 30 March 2017 (12:00) (updated 17 February 2020)

SAP Vulnerable to Ransomware Attacks

The SAP scheduled monthly patch roll-out corrected a vulnerability in the SAP GUI that allows an attacker to bypass security controls and execute code on the user's system.

CC-1124 Low

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

Container Breaker Vulnerability Discovered

Docker and other similar container software packages contain a vulnerability that can allow access to the host device.

CC-1872 Low

Published Wednesday 20 December 2017 (12:00) (updated 17 February 2020)

GnatSpy Mobile Malware

GnatSpy is a family of malware which includes threats such as VAMP and FrozenCell. This family of mobile malware targets images, text messages, contacts and call history on infected devices.

CC-1864 Low

Published Tuesday 19 December 2017 (12:00) (updated 17 February 2020)

Keyloggers on HP devices

A keylogger has been found in the SynTP.sys driver which is found pre-installed on hundreds of HP laptop models.

CC-1841 Low

Published Friday 8 December 2017 (12:00) (updated 17 February 2020)

Microsoft Releases Security Updates for its Malware Protection Engine

Microsoft has released updates to address a vulnerability in their Malware Protection Engine (MPE) affecting multiple products. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-1470 Medium

Published Wednesday 21 June 2017 (12:00) (updated 17 February 2020)

MacRansom - Offered as Ransomware-as-a-Service

Security researchers are warning of MacRansom, a new and free MacOS-based ransomware-as-a-service (RaaS) which has been infecting Mac computers for the past several weeks.

CC-1464 High

Published Wednesday 14 June 2017 (12:00) (updated 17 February 2020)

Microsoft Release Updates for New and Older Platforms

Microsoft, as part of their regular Update Tuesday schedule, have provided additional critical security updates to address vulnerabilities that are at heightened risk of exploitation due to past nation-state activity and disclosures.

CC-1748 Low

Published Tuesday 7 November 2017 (12:00) (updated 17 February 2020)

Silent Trojan

Silent, also known as Silence, trojan is used to monitor a user’s machine so that over time it can obtain information on the software and activities being used within the system.

CC-1712 Low

Published Thursday 19 October 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.