Threat Research Archives - Page 9 of 13

Sha zhu pan scam uses AI chat tool to target iPhone and Android users

by unitedimaging on August 2, 2023

“CryptoRom” fake crypto-trading mobile apps pushed through AI-assisted romance scam, using ChatGPT to lure targets. Contact us today for more information about SOPHOS cyber security solutions

Uncovering an Iranian mobile malware campaign

by unitedimaging on July 27, 2023

Sophos X-Ops researchers discover a cluster of credential-harvesting apps targeting Iranian bank customers Contact us today for more information about SOPHOS cyber security solutions

Into the tank with Nitrogen

by unitedimaging on July 26, 2023

The element originally known as “foul air” stinks up computers as a new initial-access campaign exhibiting some uncommon techniques Contact us today for more information about SOPHOS cyber security solutions

Bad ad fad leads to IcedID, Gozi infections

by unitedimaging on July 20, 2023

Malvertising campaigns using paid ads result in infostealer and backdoor attacks Contact us today for more information about SOPHOS cyber security solutions

Sophos Discovers Ransomware Abusing “Sophos” Name

by unitedimaging on July 18, 2023

Updated, July 24: This article has been updated with further information on the encryption method used by the ransomware and other details of the ransomware itself, as well as a […]

Microsoft Revokes Malicious Drivers in Patch Tuesday Culling

by unitedimaging on July 11, 2023

In December 2022, Microsoft published their monthly Windows Update packages that included an advisory about malicious drivers, signed by Microsoft and other code-signing authorities, that Sophos X-Ops (and others) observed […]

July’s Patch Tuesday: A rich harvest

by unitedimaging on July 11, 2023

Over a hundred Windows patches, a high-impact advisory, and a guest appearance by… Internet Explorer?! Contact us today for more information about SOPHOS cyber security solutions

Clop At The Top – But For How Long?

by unitedimaging on July 10, 2023

Halfway through 2023, the threat landscape is dominated by one loud, adaptable, persistent player Contact us today for more information about SOPHOS cyber security solutions

Introducing Cyberseriousness: A manifesto for quality, respect, integrity, and usefulness in infosec

by unitedimaging on July 3, 2023

Opening up a years-long in-house conversation about “CQ” to the wider cybersecurity world Contact us today for more information about SOPHOS cyber security solutions

Investigator, API Yourself: Deploying Microsoft Graph on the trail of an attacker

by unitedimaging on June 30, 2023

Two clients, two threat hunts – any connection? Using Microsoft’s cloud-security API to parse piles of disparate data leads to fascinating findings Contact us today for more information about SOPHOS […]

A smorgasbord for June’s Patch Tuesday

by unitedimaging on June 13, 2023

Between its own fixes and a slew of FYI alerts covering Edge, GitHub, and Autodesk, Microsoft piles 94 CVEs onto sysadmins’ plates; Fortinet and Adobe also at the table Contact […]

Update 2: Information on MOVEit Vulnerabilities CVE-2023-34362, CVE-2023-35036, and CVE-2023-35708

by unitedimaging on June 5, 2023

Users of the file-transfer package should apply patches immediately and check for indications of possible compromise Contact us today for more information about SOPHOS cyber security solutions

No matter where your employees go, there you are

by unitedimaging on May 25, 2023

With increasingly flexible remote-work options (for keeps or just for the holidays), security’s got to push left to keep pace Contact us today for more information about SOPHOS cyber security […]

The Phantom Menace: Brute Ratel remains rare and targeted

by unitedimaging on May 18, 2023

The commercial attack tool’s use by bad actors has faded after an initial flurry, while Cobalt Strike remains the go-to post-exploitation tool for many. Contact us today for more information […]

“FleeceGPT” mobile apps target AI-curious to rake in cash

by unitedimaging on May 17, 2023

Interest in OpenAI’s latest version of its interactive language model has spurred a new wave of scam apps looking to cash in on the hype Contact us today for more […]

Akira Ransomware is “bringin’ 1988 back”

by unitedimaging on May 9, 2023

A new recently observed ransomware family dubbed Akira uses a retro aesthetic on their victim site very reminiscent of the 1980s green screen consoles and possibly takes its namesake from […]