Cyber alerts - NHS England Digital

Published Thursday 15 March 2018 (12:00) (updated 17 February 2020)

FinFisher Trojan

The spyware FinFisher (also known as FinSpy), is capable of surveillance through webcams and microphones, keylogging and exfiltration of data on an infected device.

CC-2136 Medium

Published Thursday 15 March 2018 (12:00) (updated 17 February 2020)

Spring Data REST Vulnerability

A vulnerability in Pivotal's Spring Data Java Web App development framework may allow an authenticated remote attacker to execute arbitrary code on a targeted device.

CC-2851 Low

Published Tuesday 18 December 2018 (12:00) (updated 17 February 2020)

Security Updates Released for SQLite Magellan Vulnerability

Security updates have been released to address a vulnerability named 'Magellan' in the SQLite database. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system.

CC-2374 Low

Published Friday 11 May 2018 (12:00) (updated 17 February 2020)

Google Releases Security Update for Chrome

Google has released Chrome version 66.0.3359.170 for Windows, Mac, and Linux. This version addresses vulnerabilities, one of which a remote attacker could exploit to take control of an affected system.

CC-2508 Low

Published Thursday 21 June 2018 (12:00) (updated 17 February 2020)

MirageFox Remote Access Trojan

MirageFox is a remote access trojan believed to be operated by the APT15 (AKA Ke3chang, Playful Dragon, Royal Group or Vixen Panda) advanced persistent threat group.

CC-2779 Low

Published Tuesday 13 November 2018 (12:00) (updated 17 February 2020)

TIAOODAM Cryptocurrency Miner

A new cryptocurrency miner , known as TIAOODAM, has been observed using multiple evasion techniques, including being delivered through a Windows Installer (MSI) package and the WiX packer, as part of its infection process.

CC-2012 Low

Published Thursday 1 February 2018 (12:00) (updated 17 February 2020)

WordPress Keylogger and Crypto Miner Attacks

Attackers are targeting WordPress websites to install keystroke logging and cryptocurrency miner malware.

CC-2573 Low

Published Tuesday 7 August 2018 (12:00) (updated 17 February 2020)

Mozilla Releases Security Update for Thunderbird

Mozilla has released a security update to address vulnerabilities in Thunderbird. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1987 Low

Published Wednesday 31 January 2018 (12:00) (updated 17 February 2020)

Masuta IoT Botnet

Masuta is an internet-of-things (IoT) botnet believed to have been created by Nexus Zeta, the same group that produced the Satori IoT botnet.

CC-2553 Medium

Published Tuesday 31 July 2018 (12:00) (updated 17 February 2020)

PowerGhost Trojan and Cryptocurrency Miner

PowerGhost is a file-less multipurpose trojan written in PowerShell.