March 12, 2024

The 2024 Sophos Threat Report: Cybercrime on Main Street

Ransomware remains the biggest existential cyber threat to small businesses, but others are growing.

Threat Research

July 27, 2023

Uncovering an Iranian mobile malware campaign

Sophos X-Ops researchers discover a cluster of credential-harvesting apps targeting Iranian bank customers

Threat Research

July 22, 2021

Malware increasingly targets Discord for abuse

Criminals abuse a successful chat service to host, spread, and control malware targeting their users.

Threat Research

April 09, 2024

Smoke and (screen) mirrors: A strange signed backdoor

Sophos X-Ops discovers a curious backdoored (and signed) executable, masquerading as something else entirely

Threat Research

March 17, 2023

Dangerous Android phone 0-day bugs revealed – patch or work around them now!

Despite its usually inflexible 0-day disclosure policy, Google is keeping four mobile modem bugs semi-secret due to likely ease of exploitation.

Naked Security

March 10, 2023

SHEIN shopping app goes rogue, grabs price and URL data from your clipboard

It's not exactly data theft, but it's worryingly close to "unintentional treachery" - apparently because it's great for marketing purposes

Naked Security

April 17, 2023

FBI and FCC warn about “Juicejacking” – but just how useful is their advice?

USB charging stations - can you trust them? What are the real risks, and how can you keep your data safe on the road?

Naked Security

March 23, 2023

S3 Ep127: When you chop someone out of a photo, but there they are anyway…

Listen now - latest episode. Full transcript inside.

Naked Security

September 27, 2022

WhatsApp “zero-day exploit” news scare – what you need to know

Is WhatsApp currently under active attack by cybercriminals? Is this a clear and current danger? How worried should WhatsApp users be?

Naked Security