December 19, 2024

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar 

Security OperationsThreat Research

June 18, 2024

Sophos Email awarded VBSpam+ certification

Sophos Email was the only solution to block all the malware and phishing samples in the test.

Products & Services

March 19, 2025

The sixth sense for cyber defense: Multimodal AI

Sophos X-Ops’ research, presented at Virus Bulletin 2024, uses ‘multimodal’ AI to classify spam, phishing, and unsafe web content

AI Research

February 05, 2025

Scalable Vector Graphics files pose a novel phishing threat

The SVG file format can harbor malicious HTML, scripts, and malware

Threat Research

April 01, 2025

Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream

Attack matches three-year long pattern of ScreenConnect attacks tracked by Sophos MDR as STAC4365.

Security OperationsThreat Research

October 01, 2024

SophosAI at Virus Bulletin ’24: Using multimodal AI as a “sixth sense” for cyber defense

Sophos' Younghoo Lee will present his research on the use of AI to analyze both text and image data to classify spam, phishing, and unsafe web content in Dublin.

AI Research

October 16, 2024

From QR to compromise: The growing “quishing” threat

Attackers leverage QR codes in PDF email attachments to spearphish corporate credentials from mobile devices

Threat Research

June 13, 2024

Phishing, BEC attackers target candidates in local election, among others

An escalating series of email-borne attacks were sent to candidates, including the author

Threat Research

October 23, 2024

SophosAI team presents three papers on AI applied to cybersecurity at CAMLIS

On October 24 and 25, SophosAI presents ideas on how to use models large and small—and defend against malignant ones.

AI Research