Threat Research Archives - Page 4 of 13

Scalable Vector Graphics files pose a novel phishing threat

by unitedimaging on February 5, 2025

The SVG file format can harbor malicious HTML, scripts, and malware Contact us today for more information about SOPHOS cyber security solutions

Update: Cybercriminals still not fully on board the AI train (yet)

by unitedimaging on January 28, 2025

A year after our initial research on threat actors’ attitudes to generative AI, we revisit some underground forums and find that many cybercriminals are still skeptical – although there has […]

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”

by unitedimaging on January 21, 2025

Sophos MDR identifies a new threat cluster riffing on the playbook of Storm-1811, and amped-up activity from the original connected to Black Basta ransomware. Contact us today for more information […]

Gootloader inside out

by unitedimaging on January 16, 2025

Open-source intelligence reveals the server-side code of this pernicious SEO-driven malware – without needing a lawyer afterward Contact us today for more information about SOPHOS cyber security solutions

159-CVE January Patch Tuesday smashes single-month record

by unitedimaging on January 14, 2025

Brace yourselves… and consider reading your email in plaintext for now Contact us today for more information about SOPHOS cyber security solutions

Prioritizing patching: A deep dive into frameworks and tools – Part 2: Alternative frameworks

by unitedimaging on December 30, 2024

In the second of a two-part series on tools and frameworks designed to help with remediation prioritization, we explore some alternatives to CVSS Contact us today for more information about […]

Prioritizing patching: A deep dive into frameworks and tools – Part 1: CVSS

by unitedimaging on December 27, 2024

In the first of a two-part series exploring tools and frameworks which can help organizations with remediation prioritization, Sophos X-Ops takes a look at the Common Vulnerability Scoring System (CVSS) […]

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

by unitedimaging on December 19, 2024

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar Contact us today for more information about SOPHOS cyber security solutions

The Bite from Inside: The Sophos Active Adversary Report

by unitedimaging on December 12, 2024

A sea change in available data fuels fresh insights from the first half of 2024 Contact us today for more information about SOPHOS cyber security solutions

Keeping it real: Sophos and the 2024 MITRE ATT&CK Evaluations: Enterprise

by unitedimaging on December 11, 2024

Sophos X-Ops looks at the realism of this year’s MITRE ATT&CK Evaluations Contact us today for more information about SOPHOS cyber security solutions

December Patch Tuesday arrives bearing 71 gifts

by unitedimaging on December 11, 2024

Seventeen Critical-severity CVEs ready to deck your halls; also, new blog guidance for Windows Server admins Contact us today for more information about SOPHOS cyber security solutions

Sophos MDR blocks and tracks activity from probable Iranian state actor “MuddyWater”

by unitedimaging on November 20, 2024

Sophos MDR has observed a new campaign that uses targeted phishing to entice the target to download a legitimate remote machine management tool to dump credentials. We believe with moderate […]

November Patch Tuesday loads up everyone’s plate

by unitedimaging on November 13, 2024

Fourteen product families affected as 2024 passes an unfortunate milestone Contact us today for more information about SOPHOS cyber security solutions

VEEAM exploit seen used again with a new ransomware: “Frag”

by unitedimaging on November 8, 2024

Last month, Sophos X-Ops reported several MDR cases where threat actors exploited a vulnerability in Veeam backup servers. We continue to track the activities of this threat cluster, which recently […]

Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campaign

by unitedimaging on November 6, 2024

The Internet is full of cats—and in this case, malware-delivering fake cat websites used for very targeted search engine optimization. Contact us today for more information about SOPHOS cyber security […]

From QR to compromise: The growing “quishing” threat

by unitedimaging on October 16, 2024

Attackers leverage QR codes in PDF email attachments to spearphish corporate credentials from mobile devices Contact us today for more information about SOPHOS cyber security solutions