Cyber alerts - NHS England Digital

Published Tuesday 3 July 2018 (12:00) (updated 11 January 2022)

RAMpage: ARM-based DRAM Attack

A new attack targeting modern Android-based devices has been detailed in a research paper. Known as RAMpage, the authors of the paper claim it can be used to gain unauthorised access to a targeted device.

CC-2550 Medium

Published Wednesday 25 July 2018 (12:00) (updated 11 January 2022)

Luoxk Malware Campaign

First observed in 2017, Luoxk is a malware campaign targeting web servers throughout Asia, Europe and North America.

CC-2627 Medium

Published Wednesday 22 August 2018 (12:00) (updated 11 January 2022)

Ryuk Ransomware

Wizard Spider's bespoke ransom tool

CC-2644 Medium

Published Friday 7 September 2018 (12:00) (updated 11 January 2022)

Fallout Exploit Kit

First observed in 2018, Fallout is a new exploit kit that is based on the older Nuclear Pack exploit kit.

CC-2673 Low

Published Thursday 20 September 2018 (12:00) (updated 11 January 2022)

Kraken Cryptor Ransomware

First observed in August 2018, Kraken Cryptor is a ransomware tool that is delivered to users disguised as a legitimate anti-virus application.

CC-2704 Medium

Published Thursday 4 October 2018 (12:00) (updated 11 January 2022)

NCSC Issues Warning on Known APT28 Tools

A technical report on four APT28 implants

CC-2743 Medium

Published Wednesday 24 October 2018 (12:00) (updated 11 January 2022)

FreeRTOS Remote Code Execution Vulnerabilities

Security researchers have disclosed details of thirteen critical vulnerabilities in the FreeRTOS kernel. They claim that a remote attacker could exploit some or all these vulnerabilities to cause a denial-of-service condition, collect information from system memory or execute arbitrary code on affected systems.

CC-2751 Low

Published Monday 29 October 2018 (12:00) (updated 11 January 2022)

HitmanPro.Alert Multiple Vulnerabilities

Two vulnerabilities have been disclosed in the Sophos HitmanPro.Alert anti-exploit tool. An attacker could exploit these vulnerabilities to gain access to kernel memory locations or execute arbitrary code .

CC-2758 Low

Published Wednesday 31 October 2018 (12:00) (updated 11 January 2022)

CommonRansom Ransomware

CommonRansom is a newly observed ransomware whose operators offer an unusual method of decrypting files.

CC-2764 Low

Published Friday 2 November 2018 (12:00) (updated 11 January 2022)

Zombie Phishing Campaign

Zombie Phish is a newly observed phishing campaign that is using compromised email accounts to target users via conversation hijacking.