March 17, 2022 The Ransomware Threat Intelligence Center A collection of Sophos threat research articles and security operations reports related to new or prevalent ransomware groups from 2018 to the present. The content will be updated as new research is published Security Operations
February 28, 2022 Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits An unpatched Microsoft Exchange Server let both ransomware actors in; Karma just stole data, while Conti encrypted. Threat Research
