Threat Research Archives - Page 11 of 13

January 2023 patch roundup: Microsoft tees up 98 updates

by unitedimaging on January 10, 2023

Adobe greets the new year with patches for 18 vulns in Reader, Acrobat, and others; sun sets on the last of Win7, 8, RT support Contact us today for more […]

The scammers who scam scammers on cybercrime forums: Part 4

by unitedimaging on December 28, 2022

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the fourth and final part of our series, we look […]

The scammers who scam scammers on cybercrime forums: Part 3

by unitedimaging on December 21, 2022

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the third part of our series, we look at the […]

The scammers who scam scammers on cybercrime forums: Part 2

by unitedimaging on December 14, 2022

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the second part of our series, we look at the […]

2022 Patch Tuesday cycle wraps with 48 CVEs, one advisory

by unitedimaging on December 13, 2022

Windows-heavy collection closes out a year of elevation-of-privilege vulnerabilities; no Exchange patches in sight Contact us today for more information about SOPHOS cyber security solutions

Signed driver malware moves up the software trust chain

by unitedimaging on December 13, 2022

The criminals signed their AV-killer malware, closely related to one known as BURNTCIGAR, with a legitimate WHCP certificate Contact us today for more information about SOPHOS cyber security solutions

The scammers who scam scammers on cybercrime forums: Part 1

by unitedimaging on December 7, 2022

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the first of a four-part series, we look at the […]

Detection Tools and Human Analysis Lead to a Security Non-Event

by unitedimaging on November 30, 2022

A look at how MDR turned a targeted attack into a non-event, in which no high-value credentials are compromised and several dozen employees are not tricked into letting a bad […]

LockBit 3.0 ‘Black’ attacks and leaks reveal wormable capabilities and tooling

by unitedimaging on November 30, 2022

Reverse-engineering reveals close similarities to BlackMatter ransomware, with some improvements Contact us today for more information about SOPHOS cyber security solutions

Sophos 2023 Threat Report: the continued evolution of “Crime-as-a-Service”

by unitedimaging on November 17, 2022

Maturing marketplaces, capabilities-for-hire continue to proliferate professional tools, techniques and practices across the threat spectrum. Contact us today for more information about SOPHOS cyber security solutions

Microsoft patches 62 vulnerabilities, including Kerberos, and Mark of the Web, and Exchange…sort of

by unitedimaging on November 8, 2022

Still no fix for ProxyNotShell, but two MOTW bypasses get squashed Contact us today for more information about SOPHOS cyber security solutions

Family Tree: DLL-Sideloading Cases May Be Related

by unitedimaging on November 3, 2022

A threat actor’s repeated use of DLL-hijack execution flow makes for interesting attack results, including omnivorous file ingestion; we break down five cases and find commonalities Contact us today for […]

Sophos X-Ops finds Attackers Using Covert Channels in Backdoor Against Devices

by unitedimaging on October 19, 2022

Newly discovered attack combines custom and commodity malware Contact us today for more information about SOPHOS cyber security solutions

Are threat actors turning to archives and disk images as macro usage dwindles?

by unitedimaging on October 12, 2022

Following Microsoft’s announcement that macros from the internet will be disabled by default, threat actors are using alternative file types for malware delivery. This shift brings both challenges and opportunities […]

You can’t always get what you want on Patch Tuesday

by unitedimaging on October 11, 2022

No joy for Exchange admins looking to seal off two widely reported Server vulns Contact us today for more information about SOPHOS cyber security solutions

Remove All The Callbacks – BlackByte Ransomware Disables EDR Via RTCore64.sys Abuse

by unitedimaging on October 4, 2022

A fresh exploration of the malware uncovers a new tactic for bypassing security products by abusing a known driver vulnerability Contact us today for more information about SOPHOS cyber security […]