Cyber alerts - NHS England Digital

Published Thursday 5 September 2019 (12:00) (updated 14 February 2020)

Domen Exploit Kit

Domen is a newly observed malware delivery toolkit that uses extensive reconnaissance and social engineering techniques to ensure its delivery campaigns are successful.

CC-2910 Low

Published Wednesday 30 January 2019 (12:00) (updated 14 February 2020)

BD FACSLyrics Vulnerability

Benton, Dickinson and Company (BD) have disclosed details of a improper authentication vulnerability in their FACSLyric flow cytometry products.

CC-3249 Medium

Published Wednesday 9 October 2019 (12:00) (updated 14 February 2020)

Apple Releases Security Updates for macOS

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3235 Medium

Published Thursday 3 October 2019 (12:00) (updated 14 February 2020)

NetWire Remote Access Trojan

First seen in 2012, NetWire is a remote access trojan (RAT).

CC-3009 Low

Published Friday 5 April 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Update

Cisco has released a security update to address a vulnerability in their Small Business RV320 and RV325 Dual Gigabit WAN VPN routers. A remote attacker could exploit this vulnerability to obtain sensitive information from affected systems.

CC-3035 Medium

Published Thursday 25 April 2019 (12:00) (updated 14 February 2020)

INPIVX Ransomware Service

INPIVX is a newly observed service offering buyers access to a comprehensive ransomware tool and control dashboard. Unlike other ransomware-as-a-service tools, the group operating INPIVX do not offer hosting or delivery services.

CC-3018 Medium

Published Thursday 11 April 2019 (12:00) (updated 14 February 2020)

Xwo Botnet

Xwo is a Python-based botnet family that scans the internet for exposed web services and default passwords.

CC-3050 Medium

Published Thursday 9 May 2019 (12:00) (updated 14 February 2020)

LightNeuron Microsoft Exchange Backdoor

LightNeuron is a backdoor trojan associated with Turla, an advanced persistent threat group, specifically targeting Microsoft Exchange email servers. The malware operates as a transport agent in order to gain access and control over any email flowing through the system.

CC-2969 Medium

Published Monday 11 March 2019 (12:00) (updated 14 February 2020)

Ave Maria Trojan

First observed in late 2018, Ave Maria (stylised as AVE_MARIA) is an advanced information stealing trojan with similarities to the Orcus and Revenge remote access trojans.

CC-3084 Low

Published Thursday 1 August 2019 (12:00) (updated 14 February 2020)

MyDoom Worm

First observed in 2004, MyDoom is a polymorphic internet worm targeting users worldwide.