Threat Research Archives - Page 3 of 9

Smoke and (screen) mirrors: A strange signed backdoor

by unitedimaging on April 9, 2024

Sophos X-Ops discovers a curious backdoored (and signed) executable, masquerading as something else entirely Contact us today for more information about SOPHOS cyber security solutions

It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024

by unitedimaging on April 3, 2024

The latter half of 2023 found numerous fronts on which attackers failed to press ahead. Are defenders failing to take advantage? Contact us today for more information about SOPHOS cyber […]

Remote Desktop Protocol: The Series

by unitedimaging on March 20, 2024

What is RDP, why is it a very nearly ubiquitous finding in incident response, and how can investigators run it to ground it when it goes wrong? An Active Adversary […]

59 CVEs primed for Microsoft’s March Patch Tuesday

by unitedimaging on March 12, 2024

Just two critical-severity issues addressed, though Azure and OMI admins won’t want to delay patching this month Contact us today for more information about SOPHOS cyber security solutions

The 2024 Sophos Threat Report: Cybercrime on Main Street

by unitedimaging on March 12, 2024

Ransomware remains the biggest existential cyber threat to small businesses, but others are growing. Contact us today for more information about SOPHOS cyber security solutions

It’ll be back: Attackers still abusing Terminator tool and variants

by unitedimaging on March 4, 2024

First released in May 2023, an EDR killer – and the vulnerable Zemana drivers it leverages – are still of interest to threat actors, along with variants and ported versions […]

ConnectWise ScreenConnect attacks deliver malware

by unitedimaging on February 23, 2024

Multiple attacks exploit vulnerabilities in an IT remote access tool to deliver a variety of different payloads into business environments Contact us today for more information about SOPHOS cyber security […]

LockBit: Lessons learned on winning the war on cybercrime

by unitedimaging on February 21, 2024

Making sense of the ransomware-group takedown — what it means for ransomware and law enforcement Contact us today for more information about SOPHOS cyber security solutions

February’s Patch Tuesday treats customers to 72 patches

by unitedimaging on February 14, 2024

Two issues under active exploit in the wild headline fixes across 13 product groups Contact us today for more information about SOPHOS cyber security solutions

Cryptocurrency scams metastasize into new forms

by unitedimaging on February 2, 2024

“DeFi mining” scams adopted by pig-butchering rings create more problems for those trying to defend against them. Contact us today for more information about SOPHOS cyber security solutions

Multiple vulnerabilities discovered in widely used security driver

by unitedimaging on January 25, 2024

A false-alarm incident involving Panda Security software leads to three very real CVEs Contact us today for more information about SOPHOS cyber security solutions

2024’s first Patch Tuesday steps lightly

by unitedimaging on January 9, 2024

Four dozen fixes and a handful of advisories make for the quietest January since 2020 Contact us today for more information about SOPHOS cyber security solutions

Akira, again: The ransomware that keeps on taking

by unitedimaging on December 21, 2023

Seven months after our first investigation, a fuller portrait of the criminal gang and its tactics emerges Contact us today for more information about SOPHOS cyber security solutions

CryptoGuard: An asymmetric approach to the ransomware battle

by unitedimaging on December 20, 2023

In the second of our new technical thought leadership series, Sophos X-Ops takes a detailed look at anti-ransomware techniques Contact us today for more information about SOPHOS cyber security solutions

“Inhospitality” malspam campaign targets hotel industry

by unitedimaging on December 19, 2023

Social engineering drives password-stealing malware attack against the front desk Contact us today for more information about SOPHOS cyber security solutions

Luring with love, a network of pig butchering “mining” scams robbed millions from victims’ wallets

by unitedimaging on December 18, 2023

Three threat groups using the exact same scam kit stole from 90 victims, mostly during the period of June to August, using smart contracts to hijack wallets and transfer their […]