sophos x-ops – Page 7 – Computer Security Articles

Bad ad fad leads to IcedID, Gozi infections

July 20, 2023 admin batloader, fakebat, Featured, Gozi, IcedID, malvertising, mdr, security operations, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Thu, 20 Jul 2023 10:00:07 +0000

Malvertising campaigns using paid ads result in infostealer and backdoor attacks

Security Sophos

Microsoft Revokes Malicious Drivers in Patch Tuesday Culling

July 11, 2023 admin 2023-07, anti-edr, drivers, drivers.stl, EDR, Featured, fivesys, fk_undead, fu rootkit, netfilter, Patch Tuesday, patches, rootkit, sophos x-ops, threat research, uac, wfp, windows filtering platform, Windows update

Credit to Author: Andrew Brandt| Date: Tue, 11 Jul 2023 17:20:38 +0000

In December 2022, Microsoft published their monthly Windows Update packages that included an advisory about malicious drivers, signed by Microsoft and other code-signing authorities, that Sophos X-Ops (and others) observed threat actors abusing during attacks. Today, Microsoft issued Security Advisory ADV230001 as part of their July Windows Update that addresses Sophos’ discovery of more than […]

Security Sophos

And I Shall Call It Mini-Me GPT: Using Large Language Models to Classify the Uncharted Web

June 22, 2023 admin ai research, bert, Featured, gpt-3, large language models, sophos x-ops, t5 large llm, Web Filtering, website categorization

Credit to Author: gallagherseanm| Date: Thu, 22 Jun 2023 11:30:10 +0000

Sophos AI team employs GPT and other large language models as teachers to train smaller models to label websites.

Security Sophos

The Phantom Menace: Brute Ratel remains rare and targeted

May 18, 2023 admin brute ratel, cobalt strike, Featured, havok, Meterpreter, post-exploitation tools, sliver, sophos x-ops, threat research

Credit to Author: gallagherseanm| Date: Thu, 18 May 2023 11:00:58 +0000

The commercial attack tool’s use by bad actors has faded after an initial flurry, while Cobalt Strike remains the go-to post-exploitation tool for many.

Security Sophos