Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2020-09-24 ⋅ SophosLabs Uncut ⋅ Andrew Brandt, Andrew O'Donnell, Fraser Howard
Email-delivered MoDi RAT attack pastes PowerShell commands
DBatLoader
2020-09-17 ⋅ SophosLabs Uncut ⋅ Andrew Brandt, Peter Mackenzie
Maze attackers adopt Ragnar Locker virtual machine technique
Maze
2020-08-12 ⋅ SophosLabs Uncut ⋅ Sean Gallagher
Color by numbers: inside a Dharma ransomware-as-a-service attack
Dharma
2020-08-04 ⋅ SophosLabs Uncut ⋅ Anand Ajjan, Mark Loman
WastedLocker’s techniques point to a familiar heritage
WastedLocker
2020-07-14 ⋅ SophosLabs Uncut ⋅ Markel Picado, Sean Gallagher
RATicate upgrades “RATs as a Service” attacks with commercial “crypter”
LokiBot BetaBot CloudEyE NetWire RC
2020-05-21 ⋅ Sophos ⋅ SophosLabs Uncut
Asnarök attackers twice modified attack midstream
NOTROBIN Ragnarok
2020-05-21 ⋅ Sophos ⋅ SophosLabs Uncut
Ragnar Locker ransomware deploys virtual machine to dodge security
RagnarLocker
2020-05-12 ⋅ SophosLabs Uncut ⋅ Sophos
Maze ransomware: extorting victims for 1 year and counting
Maze
2019-12-09 ⋅ SophosLabs Uncut ⋅ Andrew Brandt
Snatch ransomware reboots PCs into Safe Mode to bypass protection
Snatch
2019-09-18 ⋅ SophosLabs Uncut ⋅ Peter Mackenzie
The WannaCry hangover
WannaCryptor
2019-05-24 ⋅ SophosLabs Uncut ⋅ Andrew Brandt
Directed attacks against MySQL servers deliver ransomware
Gandcrab
2019-05-10 ⋅ SophosLabs Uncut ⋅ Andrew Brandt
MegaCortex, deconstructed: mysteries mount as analysis continues
MegaCortex
2019-03-05 ⋅ SophosLabs Uncut ⋅ Luca Nagy, Suriya Natarajan, Vikas Singh
GandCrab 101: All about the most widely distributed ransomware of the moment
Gandcrab
2019-01-30 ⋅ SophosLabs Uncut ⋅ Andrew Brandt
Matrix: Targeted, small scale, canary in the coalmine ransomware
Matrix Ransom
2018-11-29 ⋅ SophosLabs Uncut ⋅ Andrew Brandt
How a SamSam-like attack happens, and what you can do about it
SamSam
2018-10-22 ⋅ SophosLabs Uncut ⋅ Timothy Easton
Chalubo botnet wants to DDoS from your server or IoT device
Chalubo
2018-07-31 ⋅ SophosLabs Uncut ⋅ Andrew Brandt
SamSam guide to coverage
SamSam
2018-07-31 ⋅ SophosLabs Uncut ⋅ Andrew Brandt
Sophos releases SamSam ransomware report
SamSam