UPnProxy and 'EternalSilence' being used to exploit routers
Universal Plug and Play exploitation ‘UPnProxy’ and injection ‘EternalSilence’ being used to compromise devices behind a router.
12 Oct 2018Banking malware targeting business customers of New Zealand banks
A phishing campaign containing malware is targeting business banking customers of some New Zealand banks. The phishing emails are branded to look like invoice notifications from accounting software systems.
07 Jun 2018VPNFilter malware
Newly identified malware called VPNFilter gives attackers the ability to control the router and see the data that flows through it.
15 May 2018S/MIME and OpenPGP email client vulnerability
CERT NZ is aware of a new vulnerability in email clients and their use of OpenPGP and S/MIME, which are two major standards for providing end-to-end encryption for emails.
18 Apr 2018Cisco Smart Install misuse
CERT NZ is aware of an active campaign targeting Cisco devices with Smart Install (SMI) enabled.
29 Mar 2018MikroTik RouterOS vulnerability
CERT NZ has been informed of an active attack targeting MikroTik RouterOS devices.