Liquidity mining scams add another layer to cryptocurrency crime

May 10, 2022

Hyper-V and Active Directory Front and Center for May Patch Tuesday

Organizations should look at last month’s and this month’s bulletins and put their Hyper-V and Active Directory servers and infrastructure at the top of the priority list.

SophosLabs UncutThreat Research

May 04, 2022

Attacking Emotet’s Control Flow Flattening

Sweeping aside one obfuscation technique in a notorious strain of malware

SophosLabs Uncut

April 12, 2022

RPC Vulnerability Stands Out in a Field of 128 in April

This month’s Patch Tuesday is more about quantity than severity, with one flashback-inducing exception

SophosLabs UncutThreat Research

April 07, 2022

AMA #3: A look behind the curtain at SophosLabs

Join us for our live discussion on April 21st at 10 a.m. ET / 15:00 BST

Threat Research

March 16, 2022

CryptoRom Bitcoin swindlers continue to target vulnerable iPhone and Android users

Abuse of iOS TestFlight and WebClips—along with social engineering and lookalike web pages—lead to double- and triple-dipping by criminals into victims' pockets.

SophosLabs UncutThreat Research

March 10, 2022

Qakbot injects itself into the middle of your conversations

The heavily distributed botnet delivers a wide variety of payloads - and scans your network for weaknesses

SophosLabs UncutThreat Research

March 08, 2022

Microsoft patches 71 vulnerabilities including RDP Client, Exchange Server, Intune

Just two Critical-class vulnerabilities, but Windows Update doesn’t handle every package this month

SophosLabs UncutThreat Research

February 28, 2022

Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits

An unpatched Microsoft Exchange Server let both ransomware actors in; Karma just stole data, while Conti encrypted.

SophosLabs UncutThreat Research

February 23, 2022

Dridex bots deliver Entropy ransomware in recent attacks

Some code used in the ransomware bear a resemblance to code used in Dridex malware, hinting at a common origin

SophosLabs UncutThreat Research