Click here to download all references as Bib-File.
| 2021-11-18 ⋅ Sophos ⋅ New ransomware actor uses password-protected archives to bypass encryption protection |
| 2021-10-24 ⋅ Sophos ⋅ Node poisoning: hijacked package delivers coin miner and credential-stealing backdoor DanaBot Monero Miner |
| 2021-10-04 ⋅ Sophos ⋅ Atom Silo ransomware actors use Confluence exploit, DLL side-load for stealthy attack ATOMSILO Cobalt Strike |
| 2021-09-23 ⋅ Sophos ⋅ Phishing and malware actors abuse Google Forms for credentials, data exfiltration |
| 2021-09-03 ⋅ Sophos ⋅ Conti affiliates use ProxyShell Exchange exploit in ransomware attacks Cobalt Strike Conti |
| 2021-09-01 ⋅ Sophos ⋅ Fake pirated software sites serve up malware droppers as a service Raccoon |
| 2021-08-03 ⋅ Sophos ⋅ Trash Panda as a Service: Raccoon Stealer steals cookies, cryptocoins, and more Raccoon |
| 2021-07-22 ⋅ Sophos ⋅ Malware increasingly targets Discord for abuse |
| 2021-07-04 ⋅ Sophos ⋅ Independence Day: REvil uses supply chain exploit to attack hundreds of businesses REvil |
| 2021-06-02 ⋅ Sophos ⋅ AMSI bypasses remain tricks of the malware trade Agent Tesla Cobalt Strike Meterpreter |
| 2021-05-11 ⋅ Sophos ⋅ A defender’s view inside a DarkSide ransomware attack DarkSide |
| 2021-04-21 ⋅ SophosLabs Uncut ⋅ Nearly half of malware now use TLS to conceal communications Agent Tesla Cobalt Strike Dridex SystemBC |
| 2020-12-16 ⋅ SophosLabs Uncut ⋅ Ransomware operators use SystemBC RAT as off-the-shelf Tor backdoor SystemBC |
| 2020-12-08 ⋅ Sophos ⋅ Egregor ransomware: Maze’s heir apparent Egregor Maze |
| 2020-10-28 ⋅ SophosLabs Uncut ⋅ Hacks for sale: inside the Buer Loader malware-as-a-service Buer Ryuk Zloader |
| 2020-10-21 ⋅ SophosLabs Uncut ⋅ LockBit uses automated attack tools to identify tasty targets LockBit |
| 2020-10-14 ⋅ Sophos ⋅ They’re back: inside a new Ryuk ransomware attack Cobalt Strike Ryuk SystemBC |
| 2020-07-27 ⋅ Sophos Labs ⋅ ProLock ransomware gives you the first 8 kilobytes of decryption for free PwndLocker |
| 2020-07-14 ⋅ SophosLabs Uncut ⋅ RATicate upgrades “RATs as a Service” attacks with commercial “crypter” LokiBot BetaBot CloudEyE NetWire RC |
| 2020-02-02 ⋅ Sophos Labs ⋅ Agent Tesla amps up information stealing attacks Agent Tesla |