Cyber alerts

40 results

May 2019

Published Friday 31 May 2019 (12:00) (updated 14 February 2020)

Nansh0u Cryptomining Campaign

Nansh0u is a cryptocurrency mining campaign that is targeting servers around the world running Microsoft SQL Server and phpMyAdmin.

CC-3077 Medium

Published Friday 31 May 2019 (12:00) (updated 14 February 2020)

Apple Releases Security Updates for AirPort Extreme, AirPort Time Capsule

Apple has released AirPort Base Station Firmware Update 7.91 to address vulnerabilities in AirPort Extreme and AirPort Time Capsule wireless routers.

CC-3047 Low

Published Thursday 30 May 2019 (12:00) (updated 11 January 2022)

HiddenWasp Linux Remote Access Trojan

HiddenWasp is a newly observed remote access trojan that makes extensive use of code from older open-source malware such as Azazel, Elknot, and Mirai.

CC-3075 Medium

Published Thursday 30 May 2019 (12:00) (updated 14 February 2020)

ProtonBot Dropper Trojan

First observed in early 2019, ProtonBot is a modular C++ based dropper offered for sale on several dark web sites.

CC-3074 Medium

Published Tuesday 28 May 2019 (12:00) (updated 14 February 2020)

Siemens Healthineer Releases Security Updates for Multiple Products

Siemens Healthineer released security updates to address BlueKeep-related vulnerabilities in several of their products. A remote authenticated attacker could exploit these vulnerabilities to alter data or gain control of affected systems

CC-3073 Medium

Published Friday 24 May 2019 (12:00) (updated 14 February 2020)

JasperLoader Trojan

First observed in early 2019, JasperLoader is a modular downloader trojan primarily targeting financial and government organisations throughout Western Europe.

CC-3071 Medium

Published Thursday 23 May 2019 (12:00) (updated 14 February 2020)

Blue Prism Releases Update for Robotic Process Automation Software

Blue Prism has released a new version of their Robotic Process Automation software which includes a fix for a recently discovered privilege escalation vulnerability.

CC-3070 Low

Published Thursday 23 May 2019 (12:00) (updated 14 February 2020)

Winnti Linux Malware

Winnti Linux is an updated variant of the Winnti backdoor, created by the advanced persistent threat group of the same name.

CC-3072 Low

Published Thursday 23 May 2019 (12:00) (updated 14 February 2020)

GetCrypt Ransomware

GetCrypt is a newly observed ransomware being installed on machines compromised with the RIG exploit kit.

CC-3068 Medium

Published Wednesday 22 May 2019 (12:00) (updated 14 February 2020)

Babylon RAT Remote Access Trojan

Babylon RAT is an open source remote access trojan (RAT) recently observed being distributed as part of a phishing campaign. Babylon RAT can steal data, including passwords from web browsers, download and execute files, trigger denial of service attacks and hide from network security controls.