Threat Research Archives - Page 4 of 11

Turning the screws: The pressure tactics of ransomware gangs

by unitedimaging on August 6, 2024

Sophos X-Ops examines the increasingly aggressive tactics ransomware gangs use to coerce their targets Contact us today for more information about SOPHOS cyber security solutions

Driving lessons: The kernel drivers in Sophos Intercept X Advanced

by unitedimaging on August 1, 2024

Operating in kernel-space is necessary, but risky – here’s how we do it in Sophos Intercept X Advanced Contact us today for more information about SOPHOS cyber security solutions

July Patch Tuesday Unleashes a Torrent of Updates

by unitedimaging on July 9, 2024

Microsoft fixes 138 bugs in Windows and other products this month Contact us today for more information about SOPHOS cyber security solutions

Phishing, BEC attackers target candidates in local election, among others

by unitedimaging on June 13, 2024

An escalating series of email-borne attacks were sent to candidates, including the author Contact us today for more information about SOPHOS cyber security solutions

RD Web Access abuse: Fighting back

by unitedimaging on June 12, 2024

Investigation insights and recommendations from a recent welter of incident-response cases Contact us today for more information about SOPHOS cyber security solutions

June Patch Tuesday squares up with 49 patches

by unitedimaging on June 11, 2024

Just one critical-severity issue addressed, but don’t sleep on an industry-wide DNS issue Contact us today for more information about SOPHOS cyber security solutions

Operation Crimson Palace: Sophos threat hunting unveils multiple clusters of Chinese state-sponsored activity targeting Southeast Asian government

by unitedimaging on June 5, 2024

Threat clusters targeted a government agency for cyberespionage in a campaign that had precursors dating back to early 2022. Contact us today for more information about SOPHOS cyber security solutions

Operation Crimson Palace: A Technical Deep Dive

by unitedimaging on June 5, 2024

Sophos Managed Detection and Response initiated a threat hunt across all customers after the detection of abuse of a vulnerable legitimate VMware executable (vmnat.exe) to perform dynamic link library (DLL) […]

No mayday call necessary for the year’s fifth Patch Tuesday

by unitedimaging on May 14, 2024

A return to pre-April CVE volumes, mostly for Windows, though two vulns – or is it three? — are already under exploit Contact us today for more information about SOPHOS […]

Extracting data from encrypted virtual disks: six methods

by unitedimaging on May 13, 2024

For incident responders, a variety of techniques for information retrieval from locked-up VMs Contact us today for more information about SOPHOS cyber security solutions

Defenders assemble: Time to get in the game

by unitedimaging on May 7, 2024

Recent research finds signs of progress in the public-private alliance against ransomware Contact us today for more information about SOPHOS cyber security solutions

Malware campaign attempts abuse of defender binaries

by unitedimaging on April 26, 2024

Command-and-control wares try to sneak onto systems disguised as various vendors; payloads vary, but Sophos customers are protected Contact us today for more information about SOPHOS cyber security solutions

‘Junk gun’ ransomware: Peashooters can still pack a punch

by unitedimaging on April 17, 2024

A Sophos X-Ops investigation finds that a wave of crude, cheap ransomware could spell trouble for small businesses and individuals – but also provide insights into threat actor career development […]

A tumultuous, titanic Patch Tuesday as Microsoft makes some changes

by unitedimaging on April 10, 2024

The largest CVE count in recent history rolls out Contact us today for more information about SOPHOS cyber security solutions

Smoke and (screen) mirrors: A strange signed backdoor

by unitedimaging on April 9, 2024

Sophos X-Ops discovers a curious backdoored (and signed) executable, masquerading as something else entirely Contact us today for more information about SOPHOS cyber security solutions

It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024

by unitedimaging on April 3, 2024

The latter half of 2023 found numerous fronts on which attackers failed to press ahead. Are defenders failing to take advantage? Contact us today for more information about SOPHOS cyber […]