Cyber alerts

208 results

December 2018

Published Thursday 27 December 2018 (12:00) (updated 17 February 2020)

Sieren Botnet

Sieren is a botnet that can perform distributed denial-of-service (DDoS) attacks by sending floods of HTTP, HTTPS and UDP packets to specified web servers.

CC-2858 Medium

Published Thursday 27 December 2018 (12:00) (updated 17 February 2020)

Underminer Exploit Kit

First observed in July 2017, the Underminer exploit kit has received various sophisticated updates in recent weeks.

CC-2852 Medium

Published Thursday 20 December 2018 (12:00) (updated 11 January 2022)

Stolen Pencil Trojan

Stolen Pencil, also known as Stolepen, is a trojan that targets devices using Google Chrome on Microsoft Windows. It was first observed in May 2018.

CC-2856 Medium

Published Thursday 20 December 2018 (12:00) (updated 17 February 2020)

TripleM Ransomware

TripleM is a ransomware tool first seen in August 2017. The source code has been made available for sale since December 2018.

CC-2844 Medium

Published Thursday 13 December 2018 (12:00) (updated 17 February 2020)

Shamoon Wiper Trojan

First observed in 2012, Shamoon (also referred to as DistTrack) is a modular data-wiping trojan believed to have been created by a Middle Eastern-affiliated advanced persistent threat for use against governments in the region.

CC-2830 Medium

Published Thursday 6 December 2018 (12:00) (updated 17 February 2020)

EternalSilence UPnP Exploit

EternalSilence is a newly observed attack methodology that targets routers with vulnerable implementations of Universal Plug and Play (UPnP), specifically those that expose their Internet Gateway Device (IGD) controls to the Internet.

CC-2827 Medium

Published Wednesday 5 December 2018 (12:00) (updated 17 February 2020)

KingMiner Cryptocurrency Miner

KingMiner is a newly observed cryptocurrency miner that targets Microsoft Internet Information Services (IIS) and Microsoft SQL servers.

CC-2826 Medium

Published Wednesday 5 December 2018 (12:00) (updated 17 February 2020)

Active Directory Forest Trust Vulnerability

Security researchers have discovered a vulnerability in Active Directory (AD) that allows an attacker to achieve lateral movement between AD forests that share two-way trust relationships.

CC-2825 Medium

Published Wednesday 5 December 2018 (12:00) (updated 17 February 2020)

Butter Cryptomining Campaign

First observed in 2015, Butter is a cryptocurrency mining campaign that has links to Singapore and Hong Kong. It has previously utilised the XOR.DDOS remote access trojan (RAT)

CC-2829 Medium

Published Wednesday 5 December 2018 (12:00) (updated 17 February 2020)

Virut Botnet

Virut is a botnet malware family that was first seen in 2006. The botnet was believed to have been mostly shut down by a Polish-led sinkhole operation in 2013.