May 07, 2021

New Lemon Duck variants exploiting Microsoft Exchange Server

SophosLabs UncutThreat Research

May 05, 2021

Intervention halts a ProxyLogon-enabled attack

A late charge by a cavalry of reinforcements prevented the attackers from causing greater harm

SophosLabs UncutThreat Research

April 21, 2021

Nearly half of malware now use TLS to conceal communications

As more of the Internet uses Transport Layer Security, analysis of detection telemetry shows the volume of TLS encrypted communications by malware has doubled in a year.

Threat Research

March 01, 2021

“Gootloader” expands its payload delivery options

The Javascript-based infection framework for the Gootkit RAT increasingly delivers a wider variety of malware, including ransomware payloads, filelessly

SophosLabs UncutThreat Research

February 16, 2021

Conti ransomware: Evasive by nature

The attackers spreading Conti have switched gears to a completely fileless attack method

SophosLabs UncutThreat Research

December 08, 2020

Egregor ransomware: Maze’s heir apparent

A new variant of the Sekhmet ransomware has stepped into the ransomware-as-a-service game, picking up where Maze left off.

SophosLabs UncutThreat Research

November 18, 2020

Sophos’ 2021 threat report highlights a path forward

Sophos' annual roundup of the security threats that demand attention in 2021

MTRSophosLabs UncutThreat Research

February 25, 2020

How I learned to stop worrying and love ‘grey hat’ tools

SophosLabs UncutThreat Research

March 04, 2019

Anomaly in pen-test tool made malware servers visible

A security company was able to track command and control traffic generated by hacking groups thanks to an anomaly in a pen-testing tool.

Naked Security