Cyber alerts - NHS England Digital

Published Tuesday 15 January 2019 (12:00) (updated 14 February 2020)

DNSpionage DNS Hijacking Campaign

A new large-scale Domain Name System (DNS) hijacking campaign, known as DNSpionage, has been observed targeting government, infrastructure and telecommunications organisations.

CC-2905 Low

Published Monday 28 January 2019 (12:00) (updated 14 February 2020)

LabKey Releases Security Updates

LabKey has released a security update to address three vulnerabilities in their LabKey Server biomedical research platform.

CC-2896 Low

Published Wednesday 23 January 2019 (12:00) (updated 14 February 2020)

.AUF Dharma Ransomware

.AUF Dharma is a newly observed variant of the Dharma ransomware tool targeting Microsoft Windows users.

CC-3275 Medium

Published Thursday 31 October 2019 (12:00) (updated 14 February 2020)

xHunt Malware Framework

First observed in 2018, xHunt is a malware framework created by the SectorD01 advanced persistent threat for use in their campaigns throughout Europe, East and South Asia, and the United States.

CC-2951 Low

Published Monday 25 February 2019 (12:00) (updated 14 February 2020)

Cr1ptT0r Ransomware

First observed in November 2018, Cr1ptT0r is a ransomware tool available on a number of dark web hacking forums.

CC-2954 Medium

Published Thursday 28 February 2019 (12:00) (updated 14 February 2020)

BabyShark Remote Access Trojan

BabyShark is a new remote access trojan first seen in November 2018 targeting government organisations. It shares infrastructure associated with previous KimJongRAT and STOLEN PENCIL campaigns.

CC-3021 Medium

Published Thursday 11 April 2019 (12:00) (updated 14 February 2020)

TajMahal Exploitation Framework

TajMahal is a sophisticated exploitation framework discovered in the autumn of 2018 but believed to have been created in 2013.

CC-3204 Medium

Published Monday 9 September 2019 (12:00) (updated 14 February 2020)

WordPress Releases Security Update

WordPress 5.2.2 and prior versions are affected by multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of an affected website.

CC-3146 Low

Published Thursday 11 July 2019 (12:00) (updated 14 February 2020)

Agent Smith Android Trojan

First observed in early 2019, Agent Smith is an information stealing and adware trojan targeting Android users worldwide.

CC-3132 Medium

Published Thursday 4 July 2019 (12:00) (updated 14 February 2020)

Spelevo Exploit Kit

Spelevo is a newly observed exploit kit primarily targeting users in Western Europe and the USA.