Cyber alerts

23 results

June 2018

Published Thursday 28 June 2018 (12:00) (updated 17 February 2020)

SSH RDP Cryptomining Campaign

Security researchers have detected an automated campaign to install cryptocurrency mining malware on Internet-facing servers and other devices.

CC-2513 Low

Published Wednesday 27 June 2018 (12:00) (updated 17 February 2020)

BatSaver Android Malvertising Spyware

BatSaver is a newly observed malvertising and spyware trojan targeting Android devices.

CC-2514 Low

Published Wednesday 27 June 2018 (12:00) (updated 17 February 2020)

Red Alert Android Malware

Red Alert Is an Android-based malware which uses spam emails to spread infected Android Package Kit (APK) files to gain administration access to the device.

CC-2498 Medium

Published Thursday 21 June 2018 (12:00) (updated 17 February 2020)

Microsoft WIM Remote Code Execution Vulnerability

A vulnerability in Microsoft's library file 'wimgapi.dll' which is used with Windows Imaging Format (WIM) files has been discovered that could allow remote code execution.

CC-2508 Low

Published Thursday 21 June 2018 (12:00) (updated 17 February 2020)

MirageFox Remote Access Trojan

MirageFox is a remote access trojan believed to be operated by the APT15 (AKA Ke3chang, Playful Dragon, Royal Group or Vixen Panda) advanced persistent threat group.

CC-2505 Medium

Published Thursday 21 June 2018 (12:00) (updated 11 January 2022)

Mylobot Botnet

Mylobot is a botnet that targets and takes control of devices running Microsoft Windows.

CC-2506 Low

Published Thursday 21 June 2018 (12:00) (updated 17 February 2020)

HeroRat Android RAT

HeroRat is a remote access trojan (RAT) that targets Android devices and has been sold to threat actors on the Telegram messaging app since August 2017.

CC-2503 Medium

Published Thursday 21 June 2018 (12:00) (updated 17 February 2020)

Kardon Loader Trojan

Kardon Loader is a newly observed trojan and downloader believed to be in public beta. It's author has been advertising it on various dark web sites since early 2018, claiming they are in the process of adding numerous new features to it.

CC-2502 Low

Published Wednesday 20 June 2018 (12:00) (updated 9 October 2020)

SigSpoof PGP Spoofing Vulnerability

A vulnerability in the GnuPG implementation of the OpenPGP encryption standard, referred to as SigSpoof, has been detailed by a security researcher.

CC-2497 Medium

Published Wednesday 20 June 2018 (12:00) (updated 9 October 2020)

Zacinlo Rootkit Adware

First observed in 2012, Zacinlo is an adware trojan that uses rootkit -like functionality to gain persistence across operating system re-installation.