NICKEL TAPESTRY expands fraudulent worker operations
With this post, the X-Ops blog is thrilled to present research from our Sophos siblings newly joining us from Secureworks,...
XOps
Update: AI Skepticism Still Persists Among Cybercriminals
During November 2023, the research conducted by Sophos X-Ops shed light on the sentiments of threat actors towards generative AI....
Tracking of two ransomware campaigns by Sophos MDR utilizing “email flooding” and Microsoft Teams “vishing”
Sophos X-Ops’ Managed Detection and Response (MDR) team is actively engaging with incidents linked to two distinct groups of threat...
Optimizing updating: An in-depth look into frameworks and instruments – Part 1: CVSS
In August 2022, Sophos X-Ops released a white paper discussing multiple attackers – wherein, opponents target the same entities repeatedly....
A new ransomware named “Frag” emerges with the exploit of VEEAM vulnerability
Recent reports from Sophos X-Ops highlighted multiple MDR incidents involving the exploitation of a vulnerability found in Veeam backup servers....
Review of Update in Destructive tool undermines Windows systems by Curt Wilson
During the years 2022 and 2023, Sophos X-Ops released a study regarding a toolkit to disrupt the operations of endpoint...
The emerging challenge: The rise of the “quishing” menace
Constantly, security experts are vigilant for evolving threat methodologies. A recent investigation by the Sophos X-Ops unit delved into phishing...
The Return of Crimson Palace: Novel Instruments, Approaches, and Objectives
Following a short hiatus in operations, Sophos X-Ops is actively monitoring and countering what we confidently identify as a cyberespionage...
Windows computers affected by updated attack tool
During the years 2022 and 2023, a research article was released by Sophos X-Ops regarding a set of tools designed...
Qilin ransomware captured snatching credentials saved in Google Chrome
While investigating a recent Qilin ransomware breach, the security analysts from Sophos X-Ops team detected malicious activities that resulted in...
Stay Calm, get knowledgeable
The Sophos X-Ops Incident Response unit has been investigating the strategies of a ransomware faction known as Mad Liberator. This...
Raising the stakes: The coercion strategies of ransomware syndicates
In the year 2021, Sophos X-Ops released an article detailing the top ten methods ransomware operators employ to intensify pressure...
VBSpam+ Certification Presented to Sophos Email
It brings immense joy to the Sophos Email and X-Ops teams as they announce the latest accomplishment of Sophos Email...
Counteracting RD Web Access Misuse
Since the beginning of 2024, the Sophos X-Ops Managed Detection and Response (MDR) group has intervened in numerous occurrences where...
