Click here to download all references as Bib-File.
| 2022-02-23 ⋅ SophosLabs Uncut ⋅ Dridex bots deliver Entropy ransomware in recent attacks Cobalt Strike Dridex Entropy |
| 2021-11-18 ⋅ SophosLabs Uncut ⋅ New ransomware actor uses password protected archives to bypass encryption protection |
| 2021-11-11 ⋅ SophosLabs Uncut ⋅ BazarLoader ‘call me back’ attack abuses Windows 10 Apps mechanism BazarBackdoor |
| 2021-06-11 ⋅ SophosLabs Uncut ⋅ Relentless REvil, revealed: RaaS as variable as the criminals who use it REvil |
| 2021-05-28 ⋅ SophosLabs Uncut ⋅ A new ransomware enters the fray: Epsilon Red Epsilon Red |
| 2021-05-07 ⋅ SophosLabs Uncut ⋅ New Lemon Duck variants exploiting Microsoft Exchange Server CHINACHOPPER Cobalt Strike Lemon Duck |
| 2021-05-05 ⋅ SophosLabs Uncut ⋅ Intervention halts a ProxyLogon-enabled attack Cobalt Strike |
| 2021-04-21 ⋅ SophosLabs Uncut ⋅ Nearly half of malware now use TLS to conceal communications Agent Tesla Cobalt Strike Dridex SystemBC |
| 2021-04-15 ⋅ SophosLabs Uncut ⋅ BazarLoader deploys a pair of novel spam vectors BazarBackdoor |
| 2021-04-13 ⋅ SophosLabs Uncut ⋅ Compromised Exchange server hosting cryptojacker targeting other Exchange servers |
| 2021-03-24 ⋅ SophosLabs Uncut ⋅ Black Kingdom ransomware begins appearing on Exchange servers |
| 2021-02-16 ⋅ SophosLabs Uncut ⋅ A Conti ransomware attack day-by-day Conti |
| 2021-02-16 ⋅ SophosLabs Uncut ⋅ Conti ransomware: Evasive by nature Conti |
| 2021-02-16 ⋅ SophosLabs Uncut ⋅ What to expect when you’ve been hit with Conti ransomware Conti |
| 2021-01-26 ⋅ SophosLabs Uncut ⋅ Nefilim Ransomware Attack Uses “Ghost” Credentials Nefilim |
| 2020-12-21 ⋅ SophosLabs Uncut ⋅ How SunBurst malware does defense evasion SUNBURST UNC2452 |
| 2020-12-16 ⋅ SophosLabs Uncut ⋅ Ransomware operators use SystemBC RAT as off-the-shelf Tor backdoor SystemBC |
| 2020-10-28 ⋅ SophosLabs Uncut ⋅ Hacks for sale: inside the Buer Loader malware-as-a-service Buer Ryuk Zloader |
| 2020-10-21 ⋅ SophosLabs Uncut ⋅ LockBit uses automated attack tools to identify tasty targets LockBit |
| 2020-09-24 ⋅ SophosLabs Uncut ⋅ Email-delivered MoDi RAT attack pastes PowerShell commands DBatLoader |