Cyber alerts - NHS England Digital

Published Wednesday 20 June 2018 (12:00) (updated 17 February 2020)

ZeroFont Email Filter Bypass Technique

A new technique - known as ZeroFont - for bypassing Window's automatic email filtering has been detailed.

Published Thursday 14 June 2018 (12:00) (updated 17 February 2020)

Bondat Worm

First observed in 2013, Bondat is a JavaScript worm and botnet . It was initially used to alter user's browser settings for malvertising and click fraud campaigns.

CC-2857 Medium

Published Thursday 27 December 2018 (12:00) (updated 17 February 2020)

Sieren Botnet

Sieren is a botnet that can perform distributed denial-of-service (DDoS) attacks by sending floods of HTTP, HTTPS and UDP packets to specified web servers.

CC-2398 Medium

Published Wednesday 16 May 2018 (12:00) (updated 17 February 2020)

OpenPGP & S/MIME Mail Client Vulnerabilities

A number of vulnerabilities in the OpenPGP and S/MIME email encryption standards have been disclosed by a group of researchers.

CC-2798 Low

Published Tuesday 20 November 2018 (12:00) (updated 17 February 2020)

TP-Link Releases Security Update

TP-Link released a security update to address multiple vulnerabilities in their VPN Router TL-R600VPN. A remote attacker could exploit these vulnerabilities to execute arbitrary code, collect system information or cause denial-of-service.

CC-2528 Low

Published Monday 9 July 2018 (12:00) (updated 17 February 2020)

ADB Local Network Appliance Vulnerabilities

Advanced Digital Broadcast (ADB) have released updates to address three vulnerabilities in their Epicentro-based SOHO and enterprise networking equipment.

CC-2552 Low

Published Thursday 26 July 2018 (12:00) (updated 17 February 2020)

Death Botnet

A new botnet known as Death has been observed infecting Internet-of-Things (IoT) devices manufactured by AVTech.

CC-2734 Low

Published Thursday 18 October 2018 (12:00) (updated 17 February 2020)

libssh Authentication Bypass Vulnerability

libssh have a disclosed a vulnerability in their secure shell (SSH) library. A remote attacker could exploit this vulnerability to gain access to an affected device without authentication.

CC-2733 Medium

Published Thursday 18 October 2018 (12:00) (updated 17 February 2020)

Godzilla Loader Trojan

Godzilla Loader is a newly observed trojan that is intended to be used as a downloader for other malware . It has similar functionality to the Emotet trojan, with its creator advertising it on dark web forums as a cheaper alternative to the more established malware.

CC-2643 Low

Published Thursday 30 August 2018 (12:00) (updated 17 February 2020)

AcridRain Information Stealer

AcridRain is a trojan that targets multiple internet browsers such as Google Chrome and Mozilla Firefox in order to steal financial and user credentials. It has been seen for sale on various forums since July 2018.