Cyber alerts

230 results

December 2019

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Dacls Remote Access Trojan

First observed in October 2019, Dacls is a multi-platform modular remote access trojan believed to have been created by the Hidden Cobra advanced persistent threat group.

CC-3314 Medium

Published Thursday 12 December 2019 (12:00) (updated 29 June 2021)

Zeppelin Ransomware

Zeppelin is an advanced ransomware-as-a-service tool based on the VegaLocker and Buran malware. Despite sharing large amounts of its code with these older tools, Zeppelin appears to be explicitly targeted at healthcare and technology organisations throughout Western Europe and the USA.

CC-3308 Medium

Published Thursday 12 December 2019 (12:00) (updated 29 June 2021)

Snatch Ransomware

Snatch is a newly observed ransomware-as-a-service tool primarily targeting American, Canadian, and European organisations.

CC-3303 Medium

Published Thursday 5 December 2019 (12:00) (updated 29 June 2021)

PyXie Remote Access Trojan

PyXie is a newly observed Python-based remote access trojan that is used in highly targeted campaigns against financial, engineering, and government organisations.

CC-3302 Medium

Published Wednesday 4 December 2019 (12:00) (updated 29 June 2021)

Machete Trojan

First observed in early 2019, Machete (also known as Ragua) is a Python-based information stealing trojan. Originally targeted at Spanish-speaking Latin American countries, it has begun to appear in campaigns in Europe and North America.

November 2019

CC-3298 Medium

Published Thursday 28 November 2019 (12:00) (updated 14 February 2020)

DePriMon Downloader Trojan

First observed in March 2017, DePriMon (Default Print Monitor) is an advanced fileless downloader believed to be associated with the Lamberts (also known as ColoredLamberts or Longhorn) advanced persistent threat group.

CC-3297 Medium

Published Wednesday 27 November 2019 (12:00) (updated 14 February 2020)

SectopRAT Remote Access Trojan

SectopRAT is a newly observed .NET-based remote access trojan sold through hacking forums. Despite its use in a number of ongoing campaigns, it appears to still be in active development, with a number of unusable features.

CC-3296 Medium

Published Tuesday 26 November 2019 (12:00) (updated 14 February 2020)

ISC Releases Security Advisory for BIND

The Internet Systems Consortium (ISC) has released a security advisory that addresses a vulnerability affecting multiple versions of ISC Berkeley Internet Name Domain (BIND).

CC-3295 Medium

Published Thursday 21 November 2019 (12:00) (updated 14 February 2020)

Phoenix Information Stealing Trojan

Phoenix is a newly observed information stealing trojan sold through a number of hacking forums and dark web sites.

CC-3294 Medium

Published Wednesday 20 November 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome 78.0.3904.108 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.