Cyber alerts - NHS England Digital

Published Tuesday 8 January 2019 (12:00) (updated 14 February 2020)

Vidar Information Stealing Trojan

First observed in January 2019, Vidar is an information stealing trojan based on the Arkei malware. It is available for purchase on several dark web forums and can be operated on an as-a-service basis.

CC-2900 Low

Published Wednesday 23 January 2019 (12:00) (updated 14 February 2020)

Anatova Ransomware

First observed in January 2018, Anatova is a ransomware tool targeting users throughout Western Europe and the USA. In active development, the tool appears to have additional function modules, although they do not appear to be activated.

CC-3070 Low

Published Thursday 23 May 2019 (12:00) (updated 14 February 2020)

Winnti Linux Malware

Winnti Linux is an updated variant of the Winnti backdoor, created by the advanced persistent threat group of the same name.

CC-3051 Low

Published Thursday 9 May 2019 (12:00) (updated 14 February 2020)

Alpine Linux Hard-Coded Root Vulnerability

A root access vulnerability has been disclosed in the official Alpine Linux images hosted on Docker Hub. An unauthenticated attacker could exploit this vulnerability to execute arbitrary code or take control of the affected image.

CC-3015 Low

Published Wednesday 10 April 2019 (12:00) (updated 14 February 2020)

Microsoft Releases April 2019 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3004 Low

Published Thursday 4 April 2019 (12:00) (updated 14 February 2020)

Google Releases Security Update for Android

Google has released a security update to address multiple vulnerabilities in their Android mobile operating system. An attacker could exploit some or all of these vulnerabilities to take control of affected devices.

CC-2968 Medium

Published Monday 11 March 2019 (12:00) (updated 14 February 2020)

LimeRAT Remote Access Trojan

LimeRAT is a highly modular, open-source remote access trojan featuring an easy to use configuration and control interface.

CC-3164 Low

Published Thursday 25 July 2019 (12:00) (updated 14 February 2020)

BillGates Backdoor

BillGates, also known as Setag, is a backdoor and distributed denial-of-service botnet generated using a builder.

CC-2887 Medium

Published Wednesday 6 February 2019 (12:00) (updated 14 February 2020)

Orcus Remote Access Trojan

First observed in 2016, Orcus is a .NET-based remote administration tool whose author has indicated that it was created for illegitimate purposes.

CC-3178 Medium

Published Wednesday 14 August 2019 (12:00) (updated 14 February 2020)

Microsoft Releases August 2019 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.