Cyber alerts - NHS England Digital

Published Thursday 22 November 2018 (12:00) (updated 17 February 2020)

L0rdix Trojan

A new multifunctional trojan, named L0rdix, has been observed being distributed on underground or dark web forums. Based on the .NET framework, it appears the malware is in active development, with the developers aiming to add capabilities.

CC-2813 Low

Published Wednesday 28 November 2018 (12:00) (updated 17 February 2020)

Samba Releases Security Updates

The Samba Team has released security updates to address several vulnerabilities in Samba. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2773 Medium

Published Thursday 8 November 2018 (12:00) (updated 17 February 2020)

POWERSHOWER Backdoor

POWERSHOWER is a newly observed PowerShell-based backdoor believed to have been created by the Inception group, an advanced persistent threat targeting government organisations throughout Europe.

CC-2235 Low

Published Wednesday 11 April 2018 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2310 Low

Published Thursday 26 April 2018 (12:00) (updated 17 February 2020)

InnaputRAT

Innaput is a remote access trojan (RAT) that allows a remote user to exfiltrate documents from the infected user’s machine.

CC-2333 Medium

Published Wednesday 2 May 2018 (12:00) (updated 17 February 2020)

Operation GhostSecret Data Theft Campaign

The HIDDEN COBRA advanced persistent threat group are believed to be conducting an ongoing campaign known as Operation GhostSecret.

CC-2345 Low

Published Thursday 3 May 2018 (12:00) (updated 17 February 2020)

SAP NetWeaver Configuration Vulnerability

A vulnerability in SAP's NetWeaver Application Server runtime environment could allow a remote unauthenticated user to gain access to and application using the environment.

CC-2421 Low

Published Thursday 24 May 2018 (12:00) (updated 17 February 2020)

WinstarNssmMiner Cryptocurrency Miner

A new cryptocurrency miner known as WinstarNssmMiner. has been observed which can crash computers when detected.

CC-2030 Low

Published Friday 9 February 2018 (12:00) (updated 17 February 2020)

JenX IoT Botnet

JenX is a Internet of Things (IoT) botnet that has been seen performing distributed denial-of-service (DDoS) attacks using traffic volumes of up to 300Gbps. The attackers have been offering the use of the botnet as a DDoS-for-Hire-Service.

CC-2678 Low

Published Thursday 20 September 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address multiple vulnerabilities in Cisco Webex Network Recording Player. A remote attacker can exploit these vulnerabilities to take control of an affected system