Cyber alerts - NHS England Digital

Published Thursday 14 February 2019 (12:00) (updated 11 January 2022)

Cayosin DDoS Botnet

Cayosin is a newly observed botnet as-a-service that combines elements of Mirai, Qbot and other publicly available software. The developer of Cayosin has been marketing the service through legitimate social media platforms.

CC-2941 Low

Published Thursday 21 February 2019 (12:00) (updated 11 January 2022)

Bulehero Cryptocurrency Mining Worm

First observed in May 2018, Bulehero is a cryptocurrency mining worm and botnet that uses living-off-the-land techniques to compromise devices and avoid security systems.

CC-3047 Low

Published Thursday 30 May 2019 (12:00) (updated 11 January 2022)

HiddenWasp Linux Remote Access Trojan

HiddenWasp is a newly observed remote access trojan that makes extensive use of code from older open-source malware such as Azazel, Elknot, and Mirai.

CC-1116 Medium

Published Thursday 26 January 2017 (12:00) (updated 11 January 2022)

Satan Ransomware

A new ransomware tool, known as Satan, discovered by security researchers is being offered as-a-service .

CC-3120 Low

Published Thursday 27 June 2019 (12:00) (updated 11 January 2022)

Silex IoT Worm

Silex is a newly observed worm targeting unsecured Internet-of-Things (IoT) devices.

CC-3152 Low

Published Thursday 25 July 2019 (12:00) (updated 11 January 2022)

Brushaloader Downloader Trojan

First observed in June 2018, Brushaloader is a downloader trojan affiliated with the TA544 (also known as Narwhal Spider) advanced persistent threat.

CC-1153 Medium

Published Thursday 9 February 2017 (12:00) (updated 11 January 2022)

SSL v3.0 is Still Vulnerable

The vulnerable cryptographic protocol SSL 3.0 (Secure Sockets Layer) is still being used by services across the internet despite being superseded by the TLS protocol (Transport Layer Security) eighteen years ago.

CC-1243 Medium

Published Wednesday 8 March 2017 (12:00) (updated 11 January 2022)

Dridex uses technique called AtomBombing

Security researchers have discovered a new variant of the Dridex banking Trojan . It has been seen to be using a technique known as AtomBombing.

CC-1439 Medium

Published Thursday 6 August 2020 (12:00) (updated 11 January 2022)

Qakbot Trojan

A novel banking trojan and worm

CC-1582 Medium

Published Wednesday 16 August 2017 (12:00) (updated 11 January 2022)

Dridex Banking Trojan

Dridex, also known as Bugat or Cridex, is an information-stealing trojan that primarily targets financial records, banking credentials and crypto-currency wallets.