Cyber alerts

266 results

December 2018

CC-2859 Low

Published Thursday 27 December 2018 (12:00) (updated 17 February 2020)

Ghost Ransomware

Ghost is a ransomware tool that uses AES encryption against specific folders on affected devices.

CC-2857 Medium

Published Thursday 27 December 2018 (12:00) (updated 17 February 2020)

Sieren Botnet

Sieren is a botnet that can perform distributed denial-of-service (DDoS) attacks by sending floods of HTTP, HTTPS and UDP packets to specified web servers.

CC-2852 Medium

Published Thursday 20 December 2018 (12:00) (updated 11 January 2022)

Stolen Pencil Trojan

Stolen Pencil, also known as Stolepen, is a trojan that targets devices using Google Chrome on Microsoft Windows. It was first observed in May 2018.

CC-2853 Low

Published Thursday 20 December 2018 (12:00) (updated 17 February 2020)

Rising Sun Trojan

First observed in 2018, Rising Sun is an information stealing trojan created by the Lazarus advanced persistent threat group for use in their global Operation Sharpshooter campaign targeting critical infrastructure.

CC-2856 Medium

Published Thursday 20 December 2018 (12:00) (updated 17 February 2020)

TripleM Ransomware

TripleM is a ransomware tool first seen in August 2017. The source code has been made available for sale since December 2018.

CC-2844 Medium

Published Thursday 13 December 2018 (12:00) (updated 17 February 2020)

Shamoon Wiper Trojan

First observed in 2012, Shamoon (also referred to as DistTrack) is a modular data-wiping trojan believed to have been created by a Middle Eastern-affiliated advanced persistent threat for use against governments in the region.

CC-2837 Low

Published Tuesday 11 December 2018 (12:00) (updated 17 February 2020)

DarthMiner Mining Malware

DarthMiner is a newly observed cryptocurrency mining malware created using the open-source EmPyre post-exploitation tool and the XMRig mining application.

CC-2835 Low

Published Tuesday 11 December 2018 (12:00) (updated 17 February 2020)

Linux Rabbit Worm

First observed in August 2018, Rabbit (also known as Rabbot) is a Linux-based worm targeting devices in the UK, USA, South Korea and Russia to enrol into a cryptocurrency mining campaign.

CC-2833 Low

Published Thursday 6 December 2018 (12:00) (updated 7 September 2021)

WordPress Botnet Campaign

Security researchers have observed a botnet of over 20,000 infected WordPress websites being utilised to conduct cyber attacks against other WordPress websites.

CC-2834 Low

Published Thursday 6 December 2018 (12:00) (updated 17 February 2020)

STOP Ransomware

STOP is a ransomware tool first seen in December 2017.