Cyber alerts

16 results

March 2017

CC-1297 Medium

Published Thursday 30 March 2017 (12:00) (updated 17 February 2020)

LLTP Ransomware

A new ransomware has been identified based on the Venus Locker ransomware .

CC-1288 Low

Published Thursday 23 March 2017 (12:00) (updated 17 February 2020)

Difobot Worm

Phishing emails claiming to come from HSBC are tricking user’s to install the information stealing worm, Difobot.

CC-1289 Low

Published Thursday 23 March 2017 (12:00) (updated 17 February 2020)

NexusLogger - A New Cloud-Based Keylogger

NexusLogger is a cloud-based keylogger which was first discovered earlier in the year and is mostly distributed by spam email.

CC-1287 Medium

Published Wednesday 22 March 2017 (12:00) (updated 21 December 2021)

PetrWrap Ransomware

A new variant of what is believed to PetrWrap ransomware is leveraging a modified EternalBlue SMBv1 exploit (patched in MS017-010) which WannaCry used to self-propagate to local and remote networks.

CC-1285 Medium

Published Wednesday 22 March 2017 (12:00) (updated 17 February 2020)

Updated Red Cerber 2017

A new variant of Cerber ransomware named “Updated Red Cerber 2017” is being distributed by spam email campaigns.

CC-1275 Medium

Published Friday 17 March 2017 (12:00) (updated 17 February 2020)

Saphyra iDDoS Priv8 Tool

A new Distributed Denial of Service (DDoS) tool has been identified.

CC-1271 Low

Published Thursday 16 March 2017 (12:00) (updated 17 February 2020)

ELF_IMEIJ.A the DDoS Malware

A new malware targeting Linux-based Internet of Things (IoT) devices known as ELF_IMEIJ.A targets vulnerabilities identified in surveillance cameras produced by the company AVTech to carry out DDoS attacks.

CC-1273 Medium

Published Thursday 16 March 2017 (12:00) (updated 17 February 2020)

JSE Worm

new Worm has been recently identified which deletes user’s files, replacing them with an identically named malicious file and appends that file with .jse (JavaScript Embedded).

CC-1268 Low

Published Thursday 16 March 2017 (12:00) (updated 17 February 2020)

RawPOS Malware

A new variant of RawPOS has been discovered. RawPOS was first discovered in 2008 and is a highly configurable, multi-stage memory scraper. The new variants modification is making the malware undetectable.

CC-1267 Medium

Published Thursday 16 March 2017 (12:00) (updated 11 January 2022)

Shamoon 2.0

2012 the data-wiping malware, Shamoon also called Disttrack, was targeting the Middle East, more recently it has been updated to include ransomware features and has made an appearance in Europe.