March 30, 2023

3CX Desktop Attack: Sophos Customer Information

Products & Services

March 16, 2023

GPT for you and me: Applying AI language processing to cyber defenses

Three SophosAI projects harness the model behind ChatGPT for better detection of malicious activity.

AI Research

March 09, 2023

A border-hopping PlugX USB worm takes its act on the road

Borne aloft by DLL sideloading, a far-flung infection touches ten time zones

Threat Research

February 28, 2023

Sour Grapes: stomping on a Cambodia-based “pig butchering” scam

A text message leads to discovery of a vast scam infrastructure run by Chinese cyber-criminals.

Threat Research

February 14, 2023

A diverse set of fixes in February’s Patch Tuesday release

Patches for Power BI, PEAP, PostScript, Exchange, and 3D Builder

Threat Research

February 13, 2023

Fool’s Gold: dissecting a fake gold market pig-butchering scam

Scammers use counterfeit bank website, hijacked legitimate app to defraud and steal identifying information.

Threat Research

February 06, 2023

Qakbot mechanizes distribution of malicious OneNote notebooks

A large-scale "QakNote" attack deploys malicious .one files as a novel infection vector

Security OperationsThreat Research

February 01, 2023

Fraudulent “CryptoRom” trading apps sneak into Apple and Google app stores

Using changing remote content, apps slide by official review process to deliver fraud through the Apple App Store and Google Play Store.

Threat Research

January 10, 2023

January 2023 patch roundup: Microsoft tees up 98 updates

Adobe greets the new year with patches for 18 vulns in Reader, Acrobat, and others; sun sets on the last of Win7, 8, RT support

Threat Research