Threat Research Archives - United Imaging

Industrial-strength April Patch Tuesday covers 135 CVEs

by unitedimaging on April 9, 2025

One actively exploited issue patched; five Critical-severity Office vulns exploitable via Preview Pane Contact us today for more information about SOPHOS cyber security solutions

It takes two: The 2025 Sophos Active Adversary Report

by unitedimaging on April 2, 2025

The dawn of our fifth year deepens our understanding of the enemies at the gate, and some tensions inside it; plus, an anniversary gift from us to you Contact us […]

Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream

by unitedimaging on April 1, 2025

Attack matches three-year long pattern of ScreenConnect attacks tracked by Sophos MDR as STAC4365. Contact us today for more information about SOPHOS cyber security solutions

Stealing user credentials with evilginx

by unitedimaging on March 28, 2025

A malevolent mutation of the widely used nginx web server facilitates Adversary-in-the-Middle action, but there’s hope Contact us today for more information about SOPHOS cyber security solutions

PJobRAT makes a comeback, takes another crack at chat apps

by unitedimaging on March 27, 2025

Sophos X-Ops uncovers a recent campaign from an Android RAT first seen in 2019 – now infecting users in Taiwan Contact us today for more information about SOPHOS cyber security […]

The future of MFA is clear – but is it here yet?

by unitedimaging on March 20, 2025

Not all authentication is equal to the task in 2025, but there is a best choice within reach Contact us today for more information about SOPHOS cyber security solutions

Little fires everywhere for March Patch Tuesday

by unitedimaging on March 12, 2025

Just 57 CVEs to contend with (plus advisories), but six are already under exploit in the wild Contact us today for more information about SOPHOS cyber security solutions

February Patch Tuesday delivers 57 packages

by unitedimaging on February 11, 2025

After January’s deluge, a calmer update volume returns Contact us today for more information about SOPHOS cyber security solutions

Scalable Vector Graphics files pose a novel phishing threat

by unitedimaging on February 5, 2025

The SVG file format can harbor malicious HTML, scripts, and malware Contact us today for more information about SOPHOS cyber security solutions

Update: Cybercriminals still not fully on board the AI train (yet)

by unitedimaging on January 28, 2025

A year after our initial research on threat actors’ attitudes to generative AI, we revisit some underground forums and find that many cybercriminals are still skeptical – although there has […]

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”

by unitedimaging on January 21, 2025

Sophos MDR identifies a new threat cluster riffing on the playbook of Storm-1811, and amped-up activity from the original connected to Black Basta ransomware. Contact us today for more information […]

Gootloader inside out

by unitedimaging on January 16, 2025

Open-source intelligence reveals the server-side code of this pernicious SEO-driven malware – without needing a lawyer afterward Contact us today for more information about SOPHOS cyber security solutions

159-CVE January Patch Tuesday smashes single-month record

by unitedimaging on January 14, 2025

Brace yourselves… and consider reading your email in plaintext for now Contact us today for more information about SOPHOS cyber security solutions

Prioritizing patching: A deep dive into frameworks and tools – Part 2: Alternative frameworks

by unitedimaging on December 30, 2024

In the second of a two-part series on tools and frameworks designed to help with remediation prioritization, we explore some alternatives to CVSS Contact us today for more information about […]

Prioritizing patching: A deep dive into frameworks and tools – Part 1: CVSS

by unitedimaging on December 27, 2024

In the first of a two-part series exploring tools and frameworks which can help organizations with remediation prioritization, Sophos X-Ops takes a look at the Common Vulnerability Scoring System (CVSS) […]

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

by unitedimaging on December 19, 2024

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar Contact us today for more information about SOPHOS cyber security solutions