Cyber alerts - NHS England Digital

Published Monday 8 October 2018 (12:00) (updated 17 February 2020)

Vermelho IoT Botnet

Vermelho is a newly observed Mirai botnet variant that uses an expanded list of default credentials and exploits to infect devices.

CC-2793 Low

Published Tuesday 20 November 2018 (12:00) (updated 17 February 2020)

tRat Remote Access Trojan

tRat is a newly observed remote access trojan (RAT) that is being distributed by the APT group, TA505. It is believed to be targeting users at commercial banking institutions.

CC-2229 Low

Published Tuesday 10 April 2018 (12:00) (updated 17 February 2020)

WhiteRose Ransomware

A new member of the InfiniteTear ransomware family, known as WhiteRose, has been observed targeting organisations throughout Western Europe.

CC-2314 Medium

Published Friday 27 April 2018 (12:00) (updated 17 February 2020)

HPE iLO4 Ransomware Attacks

A new ransomware tool has been observed targeting HPE's (Hewlett Packard Enterprises) Integrated Lights-Out (iLO) embedded server administration software.

CC-2447 Low

Published Thursday 31 May 2018 (12:00) (updated 17 February 2020)

AMD SEVered Vulnerability

Researchers have discovered a vulnerability, named SEVered, in AMD's Secure Encrypted Virtualization (SEV) technology that allows data to be extracted from protected virtual machines (VMs) .

CC-2180 Low

Published Wednesday 28 March 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Update

Cisco has released a security updates to address vulnerabilities in their modern microprocessors which allows an attacker to perform side-channel information disclosure attacks.

CC-2075 Medium

Published Thursday 8 March 2018 (12:00) (updated 17 February 2020)

Mdrop Trojan

Mdrop is a trojan that installs other malware onto a target system. Variants have been observed since 2008.

CC-2024 Low

Published Thursday 8 February 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates for Multiple Products

Cisco has released several updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2685 Low

Published Wednesday 26 September 2018 (12:00) (updated 17 February 2020)

New Delphi-based Packer Used to Avoid AV Detection

A new executable packer has been observed being used by several well-known malware variants, including LokiBot, Remcos and AZORult, to avoid classification or detection by anti-virus and other security solutions.

CC-1933 Medium

Published Thursday 11 January 2018 (12:00) (updated 17 February 2020)

Darkhole Backdoor

Darkhole is a backdoor primarily used to steal user credentials which was first detected in 2012. The malware is targeted against Windows systems.