
Rafe Pilling
Rafe Pilling is a Director of Threat Intelligence in the Sophos Counter Threat Unit (CTU). He leads global threat intelligence production within the CTU, where he oversees all-source analysis focused on advanced cybercriminal and state-sponsored threats. This threat intelligence directly informs and supports organizations worldwide in strengthening security operations, guiding incident response, and shaping strategic cyber-risk decisions.
Content by Rafe Pilling

Threat Research
AI
malvertising
infostealer
Sophos X-Ops
Fake AI, real malware: Attackers impersonating AI brands
August 19, 2026

AI Research
AI
Agentic AI
A double-edged bleeding edge: Classifying AI threats
June 30, 2026

Security Operations
CISO
Featured
North Korea
playbook
toolkit
Detecting fraudulent North Korean hires: A CISO playbook
November 5, 2025