March 12, 2024

The 2024 Sophos Threat Report: Cybercrime on Main Street

Ransomware remains the biggest existential cyber threat to small businesses, but others are growing.

Threat Research

July 22, 2021

Malware increasingly targets Discord for abuse

Criminals abuse a successful chat service to host, spread, and control malware targeting their users.

SophosLabs UncutThreat Research

July 27, 2023

Uncovering an Iranian mobile malware campaign

Sophos X-Ops researchers discover a cluster of credential-harvesting apps targeting Iranian bank customers

Threat Research

March 18, 2020

Android malware uses coronavirus for sextortion and ransomware combo

The app says it will notify you of coronavirus cases... but in fact it locks up your phone and sextorts you for money at the same time

Naked Security

March 17, 2023

Dangerous Android phone 0-day bugs revealed – patch or work around them now!

Despite its usually inflexible 0-day disclosure policy, Google is keeping four mobile modem bugs semi-secret due to likely ease of exploitation.

Naked Security

December 18, 2020

Fishy French COVID contact tracing app is a data thief pest

An unknown threat actor attempts to scam people with a credential-stealing malware app

SophosLabs Uncut

March 10, 2023

SHEIN shopping app goes rogue, grabs price and URL data from your clipboard

It's not exactly data theft, but it's worryingly close to "unintentional treachery" - apparently because it's great for marketing purposes

Naked Security

September 27, 2022

WhatsApp “zero-day exploit” news scare – what you need to know

Is WhatsApp currently under active attack by cybercriminals? Is this a clear and current danger? How worried should WhatsApp users be?

Naked Security

October 07, 2022

WhatsApp goes after Chinese password scammers via US court

If you can't beat 'em, sue 'em!

Naked Security