Cyber alerts - NHS England Digital

Published Friday 8 March 2019 (12:00) (updated 14 February 2020)

SLUB Backdoor

First observed in early 2019, SLUB is a modular C++ based backdoor that uses the GitHub Gist service and Slack messaging application as part of its command and control infrastructure.

CC-3208 Medium

Published Wednesday 11 September 2019 (12:00) (updated 14 February 2020)

StealthFalcon Backdoor

StealthFalcon is a newly observed backdoor, created in 2015 by the Stealth Falcon advanced persistent threat group for use in their own campaigns.

CC-2913 Low

Published Thursday 31 January 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Update for Thunderbird

Mozilla has released a security update to address vulnerabilities in Thunderbird. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2878 Medium

Published Monday 14 January 2019 (12:00) (updated 14 February 2020)

Mjag Downloader Trojan

Mjag is a newly observed downloader trojan built using the .NET framework and packaged using the SmartAssembly obfuscator.

CC-3006 Low

Published Thursday 4 April 2019 (12:00) (updated 14 February 2020)

Apache Releases Security Update for Apache HTTP Server

The Apache Software Foundation has released Apache HTTP Server version 2.4.39 to address multiple vulnerabilities. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-3003 Low

Published Thursday 4 April 2019 (12:00) (updated 14 February 2020)

WordPress Releases Security Update for Easy WP SMTP Plugin

WordPress has released a security update to address a vulnerability in its Easy WP SMTP Plugin that allows an unauthenticated user to gain a full compromise of the affected website.

CC-3011 Low

Published Wednesday 10 April 2019 (12:00) (updated 14 February 2020)

Planetary Ransomware

Planetary Ransomware is a family of ransomware variants. It takes its name because it commonly uses the names of planets in the extensions appended to the names of encrypted files.

CC-3043 Low

Published Wednesday 1 May 2019 (12:00) (updated 14 February 2020)

AESDDoS Botnet

AESDDoS is a botnet used for distributed denial-of-service (DDoS) attacks.

CC-3258 Medium

Published Wednesday 16 October 2019 (12:00) (updated 14 February 2020)

BOOSTWRITE Backdoor

BOOSTWRITE is a newly observed in-memory dropper created by the FIN7 advanced persistent threat group for use in their own campaigns.

CC-2946 Low

Published Thursday 21 February 2019 (12:00) (updated 14 February 2020)

Microsoft IIS DoS Vulnerability

Microsoft has released details of a vulnerability in their Internet Information Services (IIS) product. A remote threat actor could exploit this vulnerability to cause a denial-of-service condition on an affected system.