Cyber alerts - NHS England Digital

Published Monday 14 October 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 77.0.3865.120 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3092 Medium

Published Wednesday 12 June 2019 (12:00) (updated 14 February 2020)

STATS Backdoor Family

Beginning with POWERSTATS v1 in 2011, STATS is a family of backdoor malware created and used by the MuddyWater advanced persistent threat group for use in their campaigns against governmental, telecoms and transportation organisations.

CC-3111 Medium

Published Monday 24 June 2019 (12:00) (updated 14 February 2020)

Microsoft Releases Outlook for Android Security Update

Microsoft has released an update to address a vulnerability in Outlook for Android. An attacker could exploit this vulnerability to take control of an affected system.

CC-3290 Medium

Published Thursday 14 November 2019 (12:00) (updated 14 February 2020)

PureLocker Ransomware-as-a-Service

First observed in October 2019, PureLocker is a ransomware tool believed to have been created by Golden Chickens, a malware-as-a-service (MaaS) provider affiliated with the Cobalt Group and FIN6 advanced persistent threats.

CC-3200 Medium

Published Thursday 5 September 2019 (12:00) (updated 14 February 2020)

Samba Releases Security Updates

The Samba Team has released security updates to address a vulnerability in all versions of Samba from 4.9.0 onward. An attacker could exploit this vulnerability to obtain sensitive information.

CC-3187 Medium

Published Wednesday 18 September 2019 (12:00) (updated 14 February 2020)

Skidmap Linux Rootkit

Skidmap is a newly observed rootkit targeting Linux systems, primarily web servers, in order to enrol them into cryptocurrency mining botnets.

CC-2860 Medium

Published Wednesday 2 January 2019 (12:00) (updated 14 February 2020)

JungleSec Ransomware

JungleSec is a ransomware tool that has been spread via unsecured Intelligent Platform Management Interface (IPMI) systems since November 2018.

CC-2881 Medium

Published Monday 14 January 2019 (12:00) (updated 14 February 2020)

Z-WASP Office 365 Bypass Vulnerability

Z-WASP is a zero-width space (ZWSP) vulnerability in Microsoft Office 365. An attacker could exploit this vulnerability to bypass all Office 365 security measures.

CC-2929 Medium

Published Wednesday 13 February 2019 (12:00) (updated 14 February 2020)

Trochilus Remote Access Trojan

First observed in 2015, Trochilus is a file-less remote access trojan believed to have been created by the APT10 advanced persistent threat (AKA Stone Panda or MenuPass) before being used in other campaigns by an entity known as Group 27.

CC-3054 Low

Published Thursday 16 May 2019 (12:00) (updated 14 February 2020)

KPOT Stealer Spyware

First observed in 2018, KPOT Stealer is a spyware trojan with similarities to the Agent Tesla malware.