threat research – Computer Security Articles

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

December 19, 2024 admin 0 Comments CloudFlare, Featured, flowerstorm, legitimate service abuse, phishing, phishing-as-a-service, rockstar, rockstar2fa, security operations, threat research

Credit to Author: gallagherseanm| Date: Thu, 19 Dec 2024 15:11:48 +0000

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar

Security Sophos

The Bite from Inside: The Sophos Active Adversary Report

December 12, 2024 admin active adversary, active adversary report, Featured, Incident Response, ir, lolbins, mdr, RDP, security operations, threat research

Credit to Author: Angela Gunn| Date: Thu, 12 Dec 2024 14:00:56 +0000

A sea change in available data fuels fresh insights from the first half of 2024

Security Sophos

Keeping it real: Sophos and the 2024 MITRE ATT&CK Evaluations: Enterprise

December 11, 2024 admin Featured, MITRE, mitre att&ck, ransomware, sophos x-ops, threat research

Credit to Author: Michael Wood| Date: Wed, 11 Dec 2024 15:35:22 +0000

Sophos X-Ops looks at the realism of this year’s MITRE ATT&CK Evaluations

Security Sophos

December Patch Tuesday arrives bearing 71 gifts

December 11, 2024 admin Featured, microsoft, Patch Tuesday, RDP, threat research, windows

Credit to Author: Angela Gunn| Date: Wed, 11 Dec 2024 08:00:38 +0000

Seventeen Critical-severity CVEs ready to deck your halls; also, new blog guidance for Windows Server admins

Security Sophos

Sophos MDR blocks and tracks activity from probable Iranian state actor “MuddyWater”

November 20, 2024 admin atera, legitimate service abuse, muddywater, phishing, RMM, security operations, stac 1171, ta450, threat research

Credit to Author: gallagherseanm| Date: Wed, 20 Nov 2024 17:12:12 +0000

Sophos MDR has observed a new campaign that uses targeted phishing to entice the target to download a legitimate remote machine management tool to dump credentials. We believe with moderate confidence that this activity, which we track as STAC 1171, is related to an Iranian threat actor commonly referred to as MuddyWater or TA450. Earlier […]

Security Sophos

Cybercrime-Trend im Aufwind: Phishing mit QR-Codes

November 18, 2024 admin Featured, phishing, threat research

Credit to Author: Jörg Schindler| Date: Thu, 07 Nov 2024 12:30:42 +0000

In Anlehnung an Albert Einstein ließe sich wohl sagen, dass der kriminelle Einfallsreichtum der Menschen unendlich ist. Der neueste Trend Quishing beweist jedenfalls einmal wieder, dass die Cyberkriminellen keine Möglichkeit auslassen. Die Experten von Sophos X-Ops haben sich den neuesten Hype der Infiltration über QR-Codes genauer angesehen. Wenn Cyberkriminelle ihre Phishing-Methoden mit eigentlich ganz harmlosen […]

Security Sophos

„Pacific Rim“-Report: Sophos deckt riesiges, gegnerisches Angriffs-Ökosystem auf

November 18, 2024 admin Featured, threat research

Credit to Author: Jörg Schindler| Date: Thu, 31 Oct 2024 13:20:36 +0000

Sophos hat heute den Report „Pacific Rim“ veröffentlicht, der detailliert ein jahrelanges Katz-und-Maus-Spiel aus Angriffs- und Verteidigungsoperationen mit mehreren staatlich unterstützten Cybercrime-Gruppierungen aus China beschreibt. Im Fokus der Attacken standen dabei Cybersicherheits-Perimetergeräte, darunter Sophos Firewalls. Die Angreifer nutzten eine Reihe von Kampagnen mit neuartigen Exploits und maßgeschneiderter Malware, um Tools zur Durchführung von Überwachung, Sabotage […]

Security Sophos

November Patch Tuesday loads up everyone’s plate

November 13, 2024 admin Featured, microsoft defender, microsoft windows, Patch Tuesday, threat research

Credit to Author: Angela Gunn| Date: Wed, 13 Nov 2024 16:32:38 +0000

Fourteen product families affected as 2024 passes an unfortunate milestone

← Previous