Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

五月 19, 2025

Diecinueve mujeres de Sophos reconocidas por CRN en su lista «Women of the Channel»

Products & Services

Channel

Sophos women of the channel

A photograph of a roll of dollar bills inside a pair of handcuffs, on a wooden tabletop

五月 15, 2025

Beyond the kill chain: What cybercriminals do with their money (Part 5)

Threat Research

beyond the kill chain

Cybercrime Forums

Finance

Money Laundering

Ransomware

x-ops

Several crumpled and dirty dollar bills fanned out on a white sheet

五月 15, 2025

Beyond the kill chain: What cybercriminals do with their money (Part 4)

Threat Research

beyond the kill chain

Cybercrime Forums

Finance

Money Laundering

Ransomware

Sophos X-Ops

A photograph showing a person in a suit and tie tucking a sheaf of dollar bills into their top pocket

五月 15, 2025

Beyond the kill chain: What cybercriminals do with their money (Part 3)

Threat Research

beyond the kill chain

Cybercrime Forums

Finance

Money Laundering

Ransomware

Sophos X-Ops

A photo showing a person handing over a sheaf of dollar bills to someone over a desk. The recipient is wearing a shirt and tie. In return, the recipient is handing the other person a clipboard with sheets of paper on it

五月 15, 2025

Beyond the kill chain: What cybercriminals do with their money (Part 2)

Threat Research

beyond the kill chain

Cybercrime Forums

Finance

Money Laundering

Ransomware

Sophos X-Ops

A photograph of a dollar-bill partly immersed in clear water, with bubbles

五月 15, 2025

Beyond the kill chain: What cybercriminals do with their money (Part 1)

Threat Research

beyond the kill chain

Cybercrime Forums

Featured

Finance

Money Laundering

Ransomware

Sophos X-Ops

五月 15, 2025

Sophos MDR: New analyst response actions for Microsoft 365

Products & Services

Managed Detection and Response

MDR

Microsoft

Security Operations

五月 14, 2025

Sophos Firewall v21.5: DNS protection

Products & Services

Firewall

network

v21.5

Warehouse,Inventory,With,Rack,,Pallet,And,Boxes.,Shelf,For,Storage

五月 14, 2025

Microsoft primes 71 fixes for May Patch Tuesday

Threat Research

Featured

Microsoft

Patch Tuesday

Windows