Sophos X-Ops Archives - Page 3 of 6

Press and pressure: Ransomware gangs and the media

by unitedimaging on December 13, 2023

Sophos X-Ops explores the symbiotic – but often uneasy – relationship between ransomware gangs and the media, and how threat actors are increasingly seeking to wrest control of the narrative […]

Cybercriminals can’t agree on GPTs

by unitedimaging on November 28, 2023

Despite concern over illicit applications of ChatGPT and similar models, Sophos X-Ops’ exploration of cybercrime forums suggests many threat actors are still skeptical – and wrestling with the same issues […]

Memory scanning leaves attackers nowhere to hide

by unitedimaging on November 9, 2023

Sophos X-Ops takes an in-depth look at memory scanning and why it matters Contact us today for more information about SOPHOS cyber security solutions

Ransomware actor exploits unsupported ColdFusion servers—but comes away empty-handed

by unitedimaging on October 19, 2023

Multiple LockBit knock-off attacks in September targeting obsolete software foiled, exposing tactics and tools. Contact us today for more information about SOPHOS cyber security solutions

Latest evolution of ‘pig butchering’ scam lures victim into fake mining scheme

by unitedimaging on September 18, 2023

Liquidity mining scam puts cruel new spin on Chinese cryptocurrency fraud, with a dash of AI chat Contact us today for more information about SOPHOS cyber security solutions

For the win? Offensive research contests on criminal forums

by unitedimaging on August 29, 2023

We explore some of the entries in recent cybercrime research competitions, and what they say about threat actor innovation and priorities Contact us today for more information about SOPHOS cyber […]

Ransomware actors log on when you log off. Here’s how to stop them.

by unitedimaging on August 23, 2023

With 90% of ransomware attacks occurring outside standard business hours, Sophos’ 24/7 Managed Detection and Response (MDR) service is now an essential part of an effective security stack. Contact us […]

Time keeps on slippin’ slippin’ slippin’: The 2023 Active Adversary Report for Tech Leaders

by unitedimaging on August 23, 2023

A deep dive into incident-response cases from the first half of this year finds both attackers and defenders picking up the pace Contact us today for more information about SOPHOS […]

Attacker combines phone, email lures into believable, complex attack chain

by unitedimaging on August 10, 2023

A social engineering phone call lends authenticity to the attacker’s malicious email Contact us today for more information about SOPHOS cyber security solutions

Enough attribution to count

by unitedimaging on August 8, 2023

Naming and shaming the bad guys can be gratifying, but for practical protection, Threat Activity Clusters are the way Contact us today for more information about SOPHOS cyber security solutions

Clustering attacker behavior reveals hidden patterns

by unitedimaging on August 8, 2023

A series of ransomware attacks made by different groups share curiously similar characteristics Contact us today for more information about SOPHOS cyber security solutions

Sha zhu pan scam uses AI chat tool to target iPhone and Android users

by unitedimaging on August 2, 2023

“CryptoRom” fake crypto-trading mobile apps pushed through AI-assisted romance scam, using ChatGPT to lure targets. Contact us today for more information about SOPHOS cyber security solutions

Uncovering an Iranian mobile malware campaign

by unitedimaging on July 27, 2023

Sophos X-Ops researchers discover a cluster of credential-harvesting apps targeting Iranian bank customers Contact us today for more information about SOPHOS cyber security solutions

Into the tank with Nitrogen

by unitedimaging on July 26, 2023

The element originally known as “foul air” stinks up computers as a new initial-access campaign exhibiting some uncommon techniques Contact us today for more information about SOPHOS cyber security solutions

Bad ad fad leads to IcedID, Gozi infections

by unitedimaging on July 20, 2023

Malvertising campaigns using paid ads result in infostealer and backdoor attacks Contact us today for more information about SOPHOS cyber security solutions

Microsoft Revokes Malicious Drivers in Patch Tuesday Culling

by unitedimaging on July 11, 2023

In December 2022, Microsoft published their monthly Windows Update packages that included an advisory about malicious drivers, signed by Microsoft and other code-signing authorities, that Sophos X-Ops (and others) observed […]