November 20, 2025

WhatsApp compromise leads to Astaroth deployment

Another campaign targeting WhatsApp users in Brazil spreads like a worm and employs multiple payloads for credential theft, session hijacking, and persistence

Threat Research

October 10, 2025

WhatsApp Worm Targets Brazilian Banking Customers

Threat Research

March 09, 2023

A border-hopping PlugX USB worm takes its act on the road

Borne aloft by DLL sideloading, a far-flung infection touches ten time zones

Threat Research

December 01, 2022

The CHRISTMA EXEC network worm – 35 years and counting!

"Uh-oh, this viruses-and-worms scene could turn out quite troublesome." If only we'd been wrong...

Naked Security

January 12, 2022

Wormable Windows HTTP hole – what you need to know

One bug in the January 2022 Patch Tuesday list is getting lots of attention: "HTTP Protocol Stack Remote Code Execution Vulnerability".

Naked Security

July 15, 2021

The Code Red worm 20 years on – what have we learned?

"It was 20 years ago today..." that we learned a few lessons that are well worth revisiting!

Naked Security

December 08, 2020

20 years of cyberthreats that shaped information security

Sophos senior security advisor, John Shier, explores the defining threats from the last two decades and their legacy

Malware

July 15, 2020

Patch now! SIGRED – the wormable hole in your Windows servers

The bug can definitely crash your Windows DNS servers, and it could end up being used for much worse than that. Please patch now!

Naked Security

June 24, 2020

Glupteba malware hides in plain sight

A worm focused on concealment and stealth may keep malware payloads hidden from view

SophosLabs Uncut