Sophos X-Ops Archives - Page 4 of 7

It’ll be back: Attackers still abusing Terminator tool and variants

by unitedimaging on March 4, 2024

First released in May 2023, an EDR killer – and the vulnerable Zemana drivers it leverages – are still of interest to threat actors, along with variants and ported versions […]

ConnectWise ScreenConnect attacks deliver malware

by unitedimaging on February 23, 2024

Multiple attacks exploit vulnerabilities in an IT remote access tool to deliver a variety of different payloads into business environments Contact us today for more information about SOPHOS cyber security […]

Safer Internet Day is as important as ever

by unitedimaging on February 5, 2024

Use this timely reminder to protect yourself on the internet Contact us today for more information about SOPHOS cyber security solutions

Cryptocurrency scams metastasize into new forms

by unitedimaging on February 2, 2024

“DeFi mining” scams adopted by pig-butchering rings create more problems for those trying to defend against them. Contact us today for more information about SOPHOS cyber security solutions

“Inhospitality” malspam campaign targets hotel industry

by unitedimaging on December 19, 2023

Social engineering drives password-stealing malware attack against the front desk Contact us today for more information about SOPHOS cyber security solutions

Press and pressure: Ransomware gangs and the media

by unitedimaging on December 13, 2023

Sophos X-Ops explores the symbiotic – but often uneasy – relationship between ransomware gangs and the media, and how threat actors are increasingly seeking to wrest control of the narrative […]

Cybercriminals can’t agree on GPTs

by unitedimaging on November 28, 2023

Despite concern over illicit applications of ChatGPT and similar models, Sophos X-Ops’ exploration of cybercrime forums suggests many threat actors are still skeptical – and wrestling with the same issues […]

Memory scanning leaves attackers nowhere to hide

by unitedimaging on November 9, 2023

Sophos X-Ops takes an in-depth look at memory scanning and why it matters Contact us today for more information about SOPHOS cyber security solutions

Ransomware actor exploits unsupported ColdFusion servers—but comes away empty-handed

by unitedimaging on October 19, 2023

Multiple LockBit knock-off attacks in September targeting obsolete software foiled, exposing tactics and tools. Contact us today for more information about SOPHOS cyber security solutions

Latest evolution of ‘pig butchering’ scam lures victim into fake mining scheme

by unitedimaging on September 18, 2023

Liquidity mining scam puts cruel new spin on Chinese cryptocurrency fraud, with a dash of AI chat Contact us today for more information about SOPHOS cyber security solutions

For the win? Offensive research contests on criminal forums

by unitedimaging on August 29, 2023

We explore some of the entries in recent cybercrime research competitions, and what they say about threat actor innovation and priorities Contact us today for more information about SOPHOS cyber […]

Ransomware actors log on when you log off. Here’s how to stop them.

by unitedimaging on August 23, 2023

With 90% of ransomware attacks occurring outside standard business hours, Sophos’ 24/7 Managed Detection and Response (MDR) service is now an essential part of an effective security stack. Contact us […]

Time keeps on slippin’ slippin’ slippin’: The 2023 Active Adversary Report for Tech Leaders

by unitedimaging on August 23, 2023

A deep dive into incident-response cases from the first half of this year finds both attackers and defenders picking up the pace Contact us today for more information about SOPHOS […]

Attacker combines phone, email lures into believable, complex attack chain

by unitedimaging on August 10, 2023

A social engineering phone call lends authenticity to the attacker’s malicious email Contact us today for more information about SOPHOS cyber security solutions

Enough attribution to count

by unitedimaging on August 8, 2023

Naming and shaming the bad guys can be gratifying, but for practical protection, Threat Activity Clusters are the way Contact us today for more information about SOPHOS cyber security solutions

Clustering attacker behavior reveals hidden patterns

by unitedimaging on August 8, 2023

A series of ransomware attacks made by different groups share curiously similar characteristics Contact us today for more information about SOPHOS cyber security solutions