Cyber alerts - NHS England Digital

Published Friday 5 April 2019 (12:00) (updated 14 February 2020)

Microsoft Releases Security Updates for Windows

Microsoft has released an update which mitigates potential issues while applying Microsoft security fixes and transferring files.

CC-3037 Medium

Published Thursday 25 April 2019 (12:00) (updated 14 February 2020)

Karkoff DNS Malware

Karkoff is a newly observed .NET-based malware believed to have been created by the group behind DNSpionage for use as a remote execution tool during these campaigns.

CC-3019 Low

Published Thursday 11 April 2019 (12:00) (updated 14 February 2020)

Baldr Information Stealer

Baldr is a fileless information stealing trojan as-a-service that is sold through a number of hacking forums online.

CC-3040 Medium

Published Wednesday 1 May 2019 (12:00) (updated 14 February 2020)

Carbanak Backdoor

First observed in 2014, Carbanak is a comprehensive backdoor trojan believed to have been created by the FIN7 criminal advanced persistent threat for use in their campaigns.

CC-3068 Medium

Published Wednesday 22 May 2019 (12:00) (updated 14 February 2020)

Babylon RAT Remote Access Trojan

Babylon RAT is an open source remote access trojan (RAT) recently observed being distributed as part of a phishing campaign. Babylon RAT can steal data, including passwords from web browsers, download and execute files, trigger denial of service attacks and hide from network security controls.

CC-3118 Low

Published Thursday 27 June 2019 (12:00) (updated 14 February 2020)

Riltok Banking Trojan

Riltok is a family of Android mobile banking trojans. First observed in early 2018 targeting Russian users, it has since been used in campaigns in Europe, North America and East Asia.

CC-3124 Medium

Published Thursday 27 June 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome OS

Google has released a security update to address the Intel microarchitectural data sampling (MDS) vulnerabilities in Chrome OS. A local unauthenticated attacker could exploit these vulnerabilities to gain access to sensitive data.

CC-3185 Low

Published Thursday 15 August 2019 (12:00) (updated 14 February 2020)

Cerberus Android Trojan

First observed in June 2019, Cerberus is a modular Android trojan-as-a-service sold on a number of hacking forums.

CC-2991 Low

Published Tuesday 26 March 2019 (12:00) (updated 14 February 2020)

Medtronic Conexus Telemetry Vulnerabilities

Medtronic has released details of two vulnerabilities in their proprietary Conexus radio-frequency telemetry protocol, used by a number of their cardiac resynchronisation therapy defibrillators (CRT-D) and implantable cardioverter defibrillator implant products.

CC-3233 Medium

Published Monday 30 September 2019 (12:00) (updated 14 February 2020)

MS-ISAC Releases Advisory on PHP Vulnerability

The Multi-State Information Sharing & Analysis Center (MS-ISAC) has released an advisory on a vulnerability in Hypertext Preprocessor (PHP). An attacker could exploit this vulnerability to take control of an affected system.