Cyber alerts

45 results

May 2017

CC-1440 Medium

Published Wednesday 31 May 2017 (12:00) (updated 17 February 2020)

Archimedes - Malware Platform

Leaked documentation has revealed a hacking tool known as Archimedes.

CC-1426 Medium

Published Thursday 25 May 2017 (12:00) (updated 17 February 2020)

Google Chrome flaw could allow Windows credential theft

A flaw in Google Chrome's web browser could allow attackers to plant a malicious file onto a target system.

CC-1431 Medium

Published Thursday 25 May 2017 (12:00) (updated 17 February 2020)

Samba Releases Security Updates

The Samba Team has released security updates that address a vulnerability in all versions of Samba from 3.5.0 onward. A remote attacker can exploit this vulnerability to take control of an affected system.

CC-1430 Medium

Published Wednesday 24 May 2017 (12:00) (updated 17 February 2020)

EternalRocks

Security researchers have identified a new strain of malware that targets the same vulnerability that helped WannaCry to spread. Researchers have named it EternalRocks.

CC-1427 Medium

Published Wednesday 24 May 2017 (12:00) (updated 17 February 2020)

LokiBot Information Stealing Trojan

A new variant of Loki Bot has been discovered. Loki Bot has been active since at least 2014 and is known for harvesting credentials. Loki embeds itself in PDF files to steal credentials from software on a victim's system.

CC-1425 Medium

Published Wednesday 24 May 2017 (12:00) (updated 17 February 2020)

Malware Framework - AfterMidnight and Assassin

Documentation pertaining to two malware platforms named AfterMIdnight (AM) and Assassin was recently released. The frameworks implement backdoor features which can allow an attacker to take control of affected systems.

CC-1429 Low

Published Wednesday 24 May 2017 (12:00) (updated 17 February 2020)

Malware Uses Fake WordPress API Domain to Steal Sensitive Cookies

Security researchers have found WordPress sites that were altered to secretly direct cookies for user and admin accounts to a rogue domain imitating the WordPress API.

CC-1428 Medium

Published Wednesday 24 May 2017 (12:00) (updated 4 March 2021)

Ursnif Trojan

A widely used infostealer targeting banking data

CC-1424 Medium

Published Tuesday 23 May 2017 (12:00) (updated 17 February 2020)

Malware Framework - Athena

The latest document leak from the WikiLeaks Vault 7 series includes documentation for Athena - an implant with the ability to target and infect any Microsoft Windows operating system from XP through to 10.

CC-1419 Medium

Published Thursday 18 May 2017 (12:00) (updated 17 February 2020)

Joomla Releases Security Update for CMS

Joomla! has released version 3.7.1 of its Content Management System (CMS) software to address a vulnerability. Exploitation of this vulnerability may allow a remote attacker to take control of an affected website.