Click here to download all references as Bib-File.
| 2021-04-15 ⋅ SophosLabs Uncut ⋅ BazarLoader deploys a pair of novel spam vectors BazarBackdoor |
| 2021-04-13 ⋅ SophosLabs Uncut ⋅ Compromised Exchange server hosting cryptojacker targeting other Exchange servers |
| 2021-03-24 ⋅ SophosLabs Uncut ⋅ Black Kingdom ransomware begins appearing on Exchange servers |
| 2021-02-16 ⋅ SophosLabs Uncut ⋅ A Conti ransomware attack day-by-day Conti Ransomware |
| 2021-02-16 ⋅ SophosLabs Uncut ⋅ Conti ransomware: Evasive by nature Conti Ransomware |
| 2021-02-16 ⋅ SophosLabs Uncut ⋅ What to expect when you’ve been hit with Conti ransomware Conti Ransomware |
| 2021-01-26 ⋅ SophosLabs Uncut ⋅ Nefilim Ransomware Attack Uses “Ghost” Credentials Nefilim Ransomware |
| 2020-12-21 ⋅ SophosLabs Uncut ⋅ How SunBurst malware does defense evasion SUNBURST UNC2452 |
| 2020-12-16 ⋅ SophosLabs Uncut ⋅ Ransomware operators use SystemBC RAT as off-the-shelf Tor backdoor SystemBC |
| 2020-10-28 ⋅ SophosLabs Uncut ⋅ Hacks for sale: inside the Buer Loader malware-as-a-service Buer Ryuk Zloader |
| 2020-10-21 ⋅ SophosLabs Uncut ⋅ LockBit uses automated attack tools to identify tasty targets LockBit |
| 2020-09-24 ⋅ SophosLabs Uncut ⋅ Email-delivered MoDi RAT attack pastes PowerShell commands DBatLoader |
| 2020-09-17 ⋅ SophosLabs Uncut ⋅ Maze attackers adopt Ragnar Locker virtual machine technique Maze |
| 2020-07-14 ⋅ SophosLabs Uncut ⋅ RATicate upgrades “RATs as a Service” attacks with commercial “crypter” LokiBot BetaBot CloudEyE NetWire RC |
| 2020-05-21 ⋅ Sophos ⋅ Asnarök attackers twice modified attack midstream NOTROBIN Ragnarok |
| 2020-05-21 ⋅ Sophos ⋅ Ragnar Locker ransomware deploys virtual machine to dodge security RagnarLocker |