Threat Research Archives - United Imaging

The strange tale of ischhfd83: When cybercriminals eat their own

by unitedimaging on June 4, 2025

A simple customer query leads to a rabbit hole of backdoored malware and game cheats Contact us today for more information about SOPHOS cyber security solutions

DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers

by unitedimaging on May 27, 2025

Ransomware actor exploited RMM to access multiple organizations; Sophos EDR blocked encryption on customer’s network Contact us today for more information about SOPHOS cyber security solutions

DragonForce targets rivals in a play for dominance

by unitedimaging on May 21, 2025

Not content with attacking retailers, this aggressive group is fighting a turf war with other ransomware operators Contact us today for more information about SOPHOS cyber security solutions

A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist

by unitedimaging on May 20, 2025

Another adversary picks up the email bombing / vishing Storm-1811 playbook, doing thorough reconnaissance to target specific employees with fake help desk call—this time, over the phone. Contact us today […]

Beyond the kill chain: What cybercriminals do with their money (Part 5)

by unitedimaging on May 15, 2025

In the last of our five-part series, Sophos X-Ops explores the implications and opportunities arising from threat actors’ involvement in real-world industries and crimes Contact us today for more information […]

Beyond the kill chain: What cybercriminals do with their money (Part 2)

by unitedimaging on May 15, 2025

In the second of our five-part series, Sophos X-Ops investigates the so-called ‘white’ (legitimate) business interests of threat actors Contact us today for more information about SOPHOS cyber security solutions

Beyond the kill chain: What cybercriminals do with their money (Part 1)

by unitedimaging on May 15, 2025

Sophos X-Ops investigates what financially motivated threat actors invest their ill-gotten profits in, once the dust has settled Contact us today for more information about SOPHOS cyber security solutions

Beyond the kill chain: What cybercriminals do with their money (Part 4)

by unitedimaging on May 15, 2025

In the fourth of our five-part series, Sophos X-Ops explores threat actors’ real-world criminal business interests Contact us today for more information about SOPHOS cyber security solutions

Beyond the kill chain: What cybercriminals do with their money (Part 3)

by unitedimaging on May 15, 2025

In the third of our five-part series, Sophos X-Ops explores the more legally and ethically dubious business interests of financially motivated threat actors Contact us today for more information about […]

Microsoft primes 71 fixes for May Patch Tuesday

by unitedimaging on May 14, 2025

Five issues actively exploited in the wild, but the real excitement may have been handled in advance Contact us today for more information about SOPHOS cyber security solutions

Lumma Stealer, coming and going

by unitedimaging on May 9, 2025

The high-profile information stealer switches up its TTPs, but keeps the CAPTCHA tactic; we take a deep dive Contact us today for more information about SOPHOS cyber security solutions

Finding Minhook in a sideloading attack – and Sweden too

by unitedimaging on April 29, 2025

Multifaceted changes in TTPs illustrate what researchers see when they start digging Contact us today for more information about SOPHOS cyber security solutions

Moving CVEs past one-nation control

by unitedimaging on April 17, 2025

A near-miss episode of attempted defunding spotlights a need for a better way Contact us today for more information about SOPHOS cyber security solutions

The Sophos Annual Threat Report: Cybercrime on Main Street 2025

by unitedimaging on April 16, 2025

Ransomware remains the biggest threat, but old and misconfigured network devices are making it too easy Contact us today for more information about SOPHOS cyber security solutions

Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software

by unitedimaging on April 16, 2025

These are the tools of the trade Sophos detected in use by cybercriminals over 2024 Contact us today for more information about SOPHOS cyber security solutions

Industrial-strength April Patch Tuesday covers 135 CVEs

by unitedimaging on April 9, 2025

One actively exploited issue patched; five Critical-severity Office vulns exploitable via Preview Pane Contact us today for more information about SOPHOS cyber security solutions