Click here to download all references as Bib-File.
| 2022-02-28 ⋅ Sophos ⋅ Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits Conti Karma |
| 2022-02-01 ⋅ Sophos ⋅ SolarMarker campaign used novel registry changes to establish persistence solarmarker |
| 2021-12-20 ⋅ Sophos ⋅ Logjam: Log4j exploit attempts continue in globally distributed scans, attacks |
| 2021-12-17 ⋅ Sophos ⋅ Inside the code: How the Log4Shell exploit works |
| 2021-12-12 ⋅ Sophos ⋅ Log4Shell Hell: anatomy of an exploit outbreak |
| 2021-11-18 ⋅ SophosLabs Uncut ⋅ New ransomware actor uses password protected archives to bypass encryption protection |
| 2021-11-18 ⋅ Sophos ⋅ New ransomware actor uses password-protected archives to bypass encryption protection |
| 2021-10-24 ⋅ Sophos ⋅ Node poisoning: hijacked package delivers coin miner and credential-stealing backdoor DanaBot Monero Miner |
| 2021-10-04 ⋅ Sophos ⋅ Atom Silo ransomware actors use Confluence exploit, DLL side-load for stealthy attack ATOMSILO Cobalt Strike |
| 2021-09-23 ⋅ Sophos ⋅ Phishing and malware actors abuse Google Forms for credentials, data exfiltration |
| 2021-09-03 ⋅ Sophos ⋅ Conti affiliates use ProxyShell Exchange exploit in ransomware attacks Cobalt Strike Conti |
| 2021-09-01 ⋅ Sophos ⋅ Fake pirated software sites serve up malware droppers as a service Raccoon |
| 2021-08-03 ⋅ Sophos ⋅ Trash Panda as a Service: Raccoon Stealer steals cookies, cryptocoins, and more Raccoon |
| 2021-07-22 ⋅ Sophos ⋅ Malware increasingly targets Discord for abuse |
| 2021-07-04 ⋅ Sophos ⋅ Independence Day: REvil uses supply chain exploit to attack hundreds of businesses REvil |
| 2021-06-02 ⋅ Sophos ⋅ AMSI bypasses remain tricks of the malware trade Agent Tesla Cobalt Strike Meterpreter |
| 2021-05-11 ⋅ Sophos ⋅ A defender’s view inside a DarkSide ransomware attack DarkSide |
| 2021-04-21 ⋅ SophosLabs Uncut ⋅ Nearly half of malware now use TLS to conceal communications Agent Tesla Cobalt Strike Dridex SystemBC |
| 2020-12-16 ⋅ SophosLabs Uncut ⋅ Ransomware operators use SystemBC RAT as off-the-shelf Tor backdoor SystemBC |
| 2020-12-08 ⋅ Sophos ⋅ Egregor ransomware: Maze’s heir apparent Egregor Maze |