March 17, 2022 The Ransomware Threat Intelligence Center A collection of Sophos threat research articles and security operations reports related to new or prevalent ransomware groups from 2018 to the present. The content will be updated as new research is published Security Operations
September 18, 2020 A real-life Maze ransomware attack – “If at first you don’t succeed…” The crooks wanted $15,000,000. They didn't get it. Huzzah! Naked Security
September 17, 2020 Maze attackers adopt Ragnar Locker virtual machine technique Under pressure to evade detection by endpoint protection, ransomware criminals try a more radical approach SophosLabs Uncut
May 22, 2020 The ransomware that attacks you from inside a virtual machine In a recent attack, Ragnar Locker ransomware was seen encrypting victim's files while shielded from security software inside a virtual machine. Naked Security