Security Operations Archives

DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers

by unitedimaging on May 27, 2025

Ransomware actor exploited RMM to access multiple organizations; Sophos EDR blocked encryption on customer’s network Contact us today for more information about SOPHOS cyber security solutions

A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist

by unitedimaging on May 20, 2025

Another adversary picks up the email bombing / vishing Storm-1811 playbook, doing thorough reconnaissance to target specific employees with fake help desk call—this time, over the phone. Contact us today […]

Sophos MDR: New analyst response actions for Microsoft 365

by unitedimaging on May 15, 2025

Powerful new capabilities enable Sophos MDR analysts to respond to M365 attacks on your behalf. Contact us today for more information about SOPHOS cyber security solutions

Lumma Stealer, coming and going

by unitedimaging on May 9, 2025

The high-profile information stealer switches up its TTPs, but keeps the CAPTCHA tactic; we take a deep dive Contact us today for more information about SOPHOS cyber security solutions

Moving CVEs past one-nation control

by unitedimaging on April 17, 2025

A near-miss episode of attempted defunding spotlights a need for a better way Contact us today for more information about SOPHOS cyber security solutions

The Sophos Annual Threat Report: Cybercrime on Main Street 2025

by unitedimaging on April 16, 2025

Ransomware remains the biggest threat, but old and misconfigured network devices are making it too easy Contact us today for more information about SOPHOS cyber security solutions

Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software

by unitedimaging on April 16, 2025

These are the tools of the trade Sophos detected in use by cybercriminals over 2024 Contact us today for more information about SOPHOS cyber security solutions

It takes two: The 2025 Sophos Active Adversary Report

by unitedimaging on April 2, 2025

The dawn of our fifth year deepens our understanding of the enemies at the gate, and some tensions inside it; plus, an anniversary gift from us to you Contact us […]

Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream

by unitedimaging on April 1, 2025

Attack matches three-year long pattern of ScreenConnect attacks tracked by Sophos MDR as STAC4365. Contact us today for more information about SOPHOS cyber security solutions

Stealing user credentials with evilginx

by unitedimaging on March 28, 2025

A malevolent mutation of the widely used nginx web server facilitates Adversary-in-the-Middle action, but there’s hope Contact us today for more information about SOPHOS cyber security solutions

Sophos ranked #1 overall for Firewall, MDR, and EDR in the G2 Spring 2025 Reports

by unitedimaging on March 27, 2025

Also ranked the top solution across 53 global reports. Contact us today for more information about SOPHOS cyber security solutions

Sophos AI Assistant: Accelerating security operations with GenAI

by unitedimaging on February 11, 2025

Introducing the powerful new AI Assistant in Sophos XDR. Crafted by experts, created for everyone. Contact us today for more information about SOPHOS cyber security solutions

Sophos Acquires Secureworks

by unitedimaging on February 3, 2025

Transforming the future, together Contact us today for more information about SOPHOS cyber security solutions

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”

by unitedimaging on January 21, 2025

Sophos MDR identifies a new threat cluster riffing on the playbook of Storm-1811, and amped-up activity from the original connected to Black Basta ransomware. Contact us today for more information […]

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

by unitedimaging on December 19, 2024

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar Contact us today for more information about SOPHOS cyber security solutions

The Bite from Inside: The Sophos Active Adversary Report

by unitedimaging on December 12, 2024

A sea change in available data fuels fresh insights from the first half of 2024 Contact us today for more information about SOPHOS cyber security solutions