Cyber alerts

27 results

February 2020

CC-3380 Low

Published Thursday 27 February 2020 (12:00) (updated 29 June 2021)

Nuke Ransomware

First observed in 2016, Nuke is a ransomware tool targeting organisations globally.

CC-3382 Medium

Published Thursday 27 February 2020 (12:00) (updated 29 June 2021)

Mozart Backdoor

Mozart is a backdoor that targets Microsoft Windows and uses the DNS protocol for command and control (C2) communication.

CC-3381 Low

Published Thursday 27 February 2020 (12:00) (updated 29 June 2021)

Kr00k WPA2 Vulnerability

Researchers have disclosed details of the Kr00k vulnerability, affecting Wi-Fi Protected Access II (WPA2, IEEE 802.11i-2004) wireless security protocol and how it’s implemented in Broadcom and Cypress wireless chipsets. It can be exploited to decrypt communications sent to and from affected systems.

CC-3379 Medium

Published Tuesday 25 February 2020 (12:00) (updated 29 June 2021)

ObliqueRAT Remote Access Trojan

ObliqueRAT is a newly observed remote access trojan targeting diplomatic and governmental organisations. Despite operating primarily throughout Southeast Asia, it has begun to appear in campaigns in Central and Western Europe.

CC-3378 Information only

Published Monday 24 February 2020 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome

Google has released Chrome version 80.0.3987.116 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3377 Information only

Published Monday 24 February 2020 (12:00) (updated 29 June 2021)

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3373 Medium

Published Thursday 20 February 2020 (12:00) (updated 29 June 2021)

Parallax Remote Access Trojan

First observed in December 2019, Parallax is an MASM-based remote access trojan sold through a number of hacking forums, with its creators offering a number of additional support services as well as bespoke development based on affiliate feedback.

CC-3376 Medium

Published Thursday 20 February 2020 (12:00) (updated 29 June 2021)

Sweyntooth Bluetooth Module Vulnerabilities

Sweyntooth is a collection of vulnerabilities that are known to affect several Bluetooth Low Energy (BLE) modules from different manufacturers. A large number of Internet-of-Things (IoT) products are affected by the vulnerabilities to varying degrees, including some medical devices.

CC-3374 Medium

Published Thursday 20 February 2020 (12:00) (updated 29 June 2021)

Hidden Cobra Trojans

A number of new downloader and remote access trojans (RAT) have been observed in campaigns globally. All five identified tools are believed to have been created by the Hidden Cobra advanced persistent threat group for use in their own campaigns.

CC-3375 Information only

Published Thursday 20 February 2020 (12:00) (updated 29 June 2021)

VMware Releases Security Update

VMware has released security updates to address multiple vulnerabilities in vRealize Operations for Horizon Adapter. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.