Focus Scroll Background

Sophos Blog

RSS

AI-impersonation-hero

Threat Research

AI

malvertising

infostealer

Sophos X-Ops

Fake AI, real malware: Attackers impersonating AI brands

A year of MDR casework shows attackers repeatedly exploiting demand for AI tools

Colin Cowie

Rafe Pilling

Ryan Westman

Threat Research

clickfix

Deno

WordPress

ClickFix campaign abuses Deno runtime for infostealer delivery

Lures on compromised WordPress sites led to installation of Deno and a Python-based infostealer

Threat Research

Abuse of alternative runtime environments Deno-tes defender headaches

Attack TTPs combine fileless execution, wide LOLBin use

Threat Research

RMM

N-able

vulnerability

N-able N-central exploitation results in RMM tool deployment

After compromising systems via CVE-2026-18577, threat actors use the additional RMM tools and network tunnels to establish persistent remote access

Sorry, no terms match your search!