Sophos Blog

RSS

Threat Research

Luciferus

underground

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

The Frontlines

DFIR

MITRE ATT&CK

Threat hunting tools

Blue Team

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

Threat Research

Cyclops Blink

Cisco

Linux

“Eye” spy: Cyclops Blink returns with extended capabilities

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

Threat Research

rootkit

php

webshell

Dissecting a PHP web server rootkit

Sophos X-Ops takes a deep dive into an insidious piece of malware

A photograph showing a person in a suit and tie tucking a sheaf of dollar bills into their top pocket

May 15, 2025

Beyond the kill chain: What cybercriminals do with their money (Part 3)

Threat Research

beyond the kill chain

Cybercrime Forums

Finance

Money Laundering

Ransomware

Sophos X-Ops

A photo showing a person handing over a sheaf of dollar bills to someone over a desk. The recipient is wearing a shirt and tie. In return, the recipient is handing the other person a clipboard with sheets of paper on it

May 15, 2025

Beyond the kill chain: What cybercriminals do with their money (Part 2)

Threat Research

beyond the kill chain

Cybercrime Forums

Finance

Money Laundering

Ransomware

Sophos X-Ops

A photograph of a dollar-bill partly immersed in clear water, with bubbles

May 15, 2025

Beyond the kill chain: What cybercriminals do with their money (Part 1)

Threat Research

beyond the kill chain

Cybercrime Forums

Featured

Finance

Money Laundering

Ransomware

Sophos X-Ops

May 15, 2025

Sophos MDR: New analyst response actions for Microsoft 365

Products & Services

Managed Detection and Response

MDR

Microsoft

Security Operations

May 14, 2025

Sophos Firewall v21.5: DNS protection

Products & Services

Firewall

network

v21.5

Warehouse,Inventory,With,Rack,,Pallet,And,Boxes.,Shelf,For,Storage

May 14, 2025

Microsoft primes 71 fixes for May Patch Tuesday

Threat Research

Featured

Microsoft

Patch Tuesday

Windows

May 13, 2025

Introducing the Sophos MSP Elevate program

Products & Services

Featured

MSP

Partners

Sophos Firewall

Sophos MDR

May 9, 2025

Lumma Stealer, coming and going

Security Operations

Threat Research

Featured

Information Stealers

Lumma Stealer

Sophos X-Ops

A photograph of water rushing down a dam

May 8, 2025

Putting the dampener on tamperers

Products & Services

Secure by Design

tamper protection