Cyber alerts - NHS England Digital

Published Wednesday 25 October 2017 (12:00) (updated 11 January 2022)

Filecoder Ransomware

Filecoder ransomware has been seen targeting Irish computer users via a faked EIR (an Irish Telecommunications company) email.

CC-2013 Low

Published Friday 9 February 2018 (12:00) (updated 11 January 2022)

Angler Exploit Kit

First observed in 2013, Angler was an exploit kit responsible for delivering other high-profile malware including Andromeda , Cryptowall , Ursnif and Vawtrak . It was involved in over 40% of all exploit kit attacks at one point.

CC-2167 Low

Published Thursday 22 March 2018 (12:00) (updated 11 January 2022)

Sigma Ransomware

Sigma is a newly observed ransomware that is delivered via protected Microsoft Word or Rich Text Format documents spread through phishing emails.

CC-2768 Medium

Published Wednesday 7 November 2018 (12:00) (updated 11 January 2022)

Ransom Campaign Exploiting Open-Source Tool

A new campaign has been observed using the open-source DiskCryptor encryption tool to perform ransom attacks on targeted devices.

CC-2797 Medium

Published Tuesday 20 November 2018 (12:00) (updated 11 January 2022)

New Campaign Targeting Drupal Websites

A new attack methodology has been identified which involves the Dirty COW (CVE-2016-5195) and Drupalgeddon 2 (CVE-2018-7600) vulnerabilities present in unpatched Drupal web servers.

CC-2845 Low

Published Monday 17 December 2018 (12:00) (updated 11 January 2022)

Hoax Bomb Threat Spam Advisory

Organisations worldwide, including the UK have reported receiving hoax spam emails containing bomb threats.

CC-2852 Medium

Published Thursday 20 December 2018 (12:00) (updated 11 January 2022)

Stolen Pencil Trojan

Stolen Pencil, also known as Stolepen, is a trojan that targets devices using Google Chrome on Microsoft Windows. It was first observed in May 2018.

CC-2871 Medium

Published Thursday 10 January 2019 (12:00) (updated 11 January 2022)

Microsoft Exchange Memory Corruption Vulnerability

Microsoft have released details of a memory corruption vulnerability in the Exchange Server. An unauthenticated remote user could exploit this vulnerability to execute arbitrary code on an affected system.

CC-2912 Medium

Published Wednesday 30 January 2019 (12:00) (updated 11 January 2022)

Zepakab Downloader Trojan

Zepakab is a newly observed downloader trojan that makes extensive use of open-source AutoIT libraries and is believed to have been created by the APT28 advanced persistent threat.

CC-2922 Medium

Published Wednesday 6 February 2019 (12:00) (updated 11 January 2022)

Multiple Remote Desktop Protocol Vulnerabilities

Multiple vulnerabilities in the Remote Desktop Protocol (RDP, also referred to as mstsc) have been disclosed by a group of security researchers.