Click here to download all references as Bib-File.
| 2020-10-14 ⋅ Sophos ⋅ They’re back: inside a new Ryuk ransomware attack Cobalt Strike Ryuk SystemBC |
| 2020-09-24 ⋅ SophosLabs Uncut ⋅ Email-delivered MoDi RAT attack pastes PowerShell commands DBatLoader |
| 2020-09-17 ⋅ SophosLabs Uncut ⋅ Maze attackers adopt Ragnar Locker virtual machine technique Maze |
| 2020-07-29 ⋅ Sophos Labs ⋅ Emotet’s return is the canary in the coal mine Emotet |
| 2020-07-27 ⋅ Sophos Labs ⋅ ProLock ransomware gives you the first 8 kilobytes of decryption for free PwndLocker |
| 2020-07-14 ⋅ SophosLabs Uncut ⋅ RATicate upgrades “RATs as a Service” attacks with commercial “crypter” LokiBot BetaBot CloudEyE NetWire RC |
| 2020-06-24 ⋅ Sophos Labs ⋅ Glupteba malware hides in plain sight Glupteba |
| 2020-06-24 ⋅ Sophos Naked Security ⋅ Glupteba - the malware that gets secret messages from the Bitcoin blockchain Glupteba |
| 2020-06-09 ⋅ Sophos Labs ⋅ Kingminer escalates attack complexity for cryptomining |
| 2020-06-04 ⋅ Sophos Naked Security ⋅ Nuclear missile contractor hacked in Maze ransomware attack Maze |
| 2020-05-27 ⋅ SophosLabs ⋅ Netwalker ransomware tools give insight into threat actor Mailto |
| 2020-05-21 ⋅ Sophos ⋅ Ragnar Locker ransomware deploys virtual machine to dodge security RagnarLocker |
| 2020-05-21 ⋅ Sophos ⋅ Asnarök attackers twice modified attack midstream NOTROBIN Ragnarok |
| 2020-05-14 ⋅ SophosLabs ⋅ RATicate: an attacker’s waves of information-stealing malware Agent Tesla BetaBot BlackRemote Formbook Loki Password Stealer (PWS) NetWire RC NjRAT Remcos |
| 2020-04-24 ⋅ Sophos Labs ⋅ LockBit ransomware borrows tricks to keep up with REvil and Maze LockBit |
| 2020-02-24 ⋅ Sophos Labs ⋅ Cloud Snooper attack bypasses firewall security measures Cloud Snooper |
| 2020-02-18 ⋅ Sophos Labs ⋅ Nearly a quarter of malware now communicates using TLS Dridex IcedID TrickBot |
| 2020-02-06 ⋅ Sophos ⋅ Living off another land: Ransomware borrows vulnerable driver to remove security software RobinHood |
| 2019-12-24 ⋅ Sophos ⋅ Gozi V3: tracked by their own stealth ISFB |
| 2019-12-18 ⋅ Sophos ⋅ MyKings: The slow but steady growth of a relentless botnet MyKings Spreader |