Sophos X-Ops Archives - Page 4 of 6

Everything Everywhere All At Once: The 2023 Active Adversary Report for Business Leaders

by unitedimaging on April 25, 2023

A deep dive into over 150 incident-response cases reveals both attackers and defenders picking up the pace Contact us today for more information about SOPHOS cyber security solutions

‘AuKill’ EDR killer malware abuses Process Explorer driver

by unitedimaging on April 19, 2023

Driver-based attacks against security products are on the rise Contact us today for more information about SOPHOS cyber security solutions

3CX Desktop Attack: Sophos Customer Information

by unitedimaging on March 30, 2023

Overview Sophos X-Ops is tracking an attack against the 3CX Desktop application, possibly undertaken by a nation-state-related group. The affected software is 3CX – a legitimate software-based PBX phone system […]

GPT for you and me: Applying AI language processing to cyber defenses

by unitedimaging on March 16, 2023

Three SophosAI projects harness the model behind ChatGPT for better detection of malicious activity. Contact us today for more information about SOPHOS cyber security solutions

A border-hopping PlugX USB worm takes its act on the road

by unitedimaging on March 9, 2023

Borne aloft by DLL sideloading, a far-flung infection touches ten time zones Contact us today for more information about SOPHOS cyber security solutions

Sour Grapes: stomping on a Cambodia-based “pig butchering” scam

by unitedimaging on February 28, 2023

A text message leads to discovery of a vast scam infrastructure run by Chinese cyber-criminals. Contact us today for more information about SOPHOS cyber security solutions

A diverse set of fixes in February’s Patch Tuesday release

by unitedimaging on February 14, 2023

Patches for Power BI, PEAP, PostScript, Exchange, and 3D Builder Contact us today for more information about SOPHOS cyber security solutions

Fraudulent “CryptoRom” trading apps sneak into Apple and Google app stores

by unitedimaging on February 1, 2023

Using changing remote content, apps slide by official review process to deliver fraud through the Apple App Store and Google Play Store. Contact us today for more information about SOPHOS […]

January 2023 patch roundup: Microsoft tees up 98 updates

by unitedimaging on January 10, 2023

Adobe greets the new year with patches for 18 vulns in Reader, Acrobat, and others; sun sets on the last of Win7, 8, RT support Contact us today for more […]

The scammers who scam scammers on cybercrime forums: Part 4

by unitedimaging on December 28, 2022

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the fourth and final part of our series, we look […]

The scammers who scam scammers on cybercrime forums: Part 3

by unitedimaging on December 21, 2022

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the third part of our series, we look at the […]

The scammers who scam scammers on cybercrime forums: Part 2

by unitedimaging on December 14, 2022

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the second part of our series, we look at the […]

Signed driver malware moves up the software trust chain

by unitedimaging on December 13, 2022

The criminals signed their AV-killer malware, closely related to one known as BURNTCIGAR, with a legitimate WHCP certificate Contact us today for more information about SOPHOS cyber security solutions

The scammers who scam scammers on cybercrime forums: Part 1

by unitedimaging on December 7, 2022

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the first of a four-part series, we look at the […]

Detection Tools and Human Analysis Lead to a Security Non-Event

by unitedimaging on November 30, 2022

A look at how MDR turned a targeted attack into a non-event, in which no high-value credentials are compromised and several dozen employees are not tricked into letting a bad […]

LockBit 3.0 ‘Black’ attacks and leaks reveal wormable capabilities and tooling

by unitedimaging on November 30, 2022

Reverse-engineering reveals close similarities to BlackMatter ransomware, with some improvements Contact us today for more information about SOPHOS cyber security solutions