WhatsApp Worm Targets Brazilian Banking Customers
Counter Threat Unit™ (CTU) researchers are investigating multiple incidents in an ongoing campaign targeting users of the WhatsApp messaging platform....
threat—research
HeartCrypt’s wholesale impersonation effort
Over the past year and a bit more, we’ve monitored a constellation of events that share a set of general...
GOLD SALEM’s Warlock operation joins busy ransomware landscape
Counter Threat Unit™ (CTU) researchers are monitoring a threat group that refers to itself as Warlock Group. The group, which...
Sophos supports Objective-See Foundation to advance macOS security and inclusive cybersecurity education
Dedicated to building a stronger, more inclusive Apple security community through open-source security tools Sophos is proud to be a...
September Patch Tuesday handles 81 CVEs
.Microsoft on Tuesday announced 81 patches affecting 15 product families. Nine of the addressed issues are considered by Microsoft to...
Beyond the kill chain: What cybercriminals do with their money (Part 5)
Content warning: Because of the nature of some of the activities we discovered, this series of articles contains content that...
Beyond the kill chain: What cybercriminals do with their money (Part 4)
Content warning: Because of the nature of some of the activities we discovered, this series of articles contains content that...
Beyond the kill chain: What cybercriminals do with their money (Part 3)
Content warning: Because of the nature of some of the activities we discovered, this series of articles contains content that...
Beyond the kill chain: What cybercriminals do with their money (Part 2)
Content warning: Because of the nature of some of the activities we discovered, this series of articles contains content that...
Microsoft primes 71 fixes for May Patch Tuesday
Microsoft on Tuesday released 71 patches affecting 14 product families. Six of the addressed issues, five involving remote code execution...
Lumma Stealer, coming and going
In September 2024, a threat hunt across Sophos Managed Detection and Response’s telemetry uncovered a Lumma Stealer campaign using fake...
NICKEL TAPESTRY expands fraudulent worker operations
With this post, the X-Ops blog is thrilled to present research from our Sophos siblings newly joining us from Secureworks,...
Finding Minhook in a sideloading attack – and Sweden too
Late in 2023 and during the first half of 2024, we monitored an attack campaign targeting several of our customers...
Advancing Security Vulnerabilities beyond Single-Nation Authority
At times, the value of something only becomes apparent once it is nearly lost. Such was the case this past...
Sophos Annual Threat Report appendix: Most commonly encountered malware and exploited software
This supplementary section of our Annual Threat Report presents additional data and insights into the tools utilized by hackers targeting...
