Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

七月 27, 2023

Uncovering an Iranian mobile malware campaign

Threat Research

Android

Banking malware

Credentials

Featured

firebase

Iran

Sophos X-Ops

七月 26, 2023

Into the tank with Nitrogen

Threat Research

Featured

initial access

malvertising

MDR

nitrogen

sideloading

Sophos X-Ops

七月 25, 2023

Introducing Sophos MDR for Microsoft Defender

Products & Services

Featured

Microsoft Defender

Security Operations

Sophos MDR

七月 24, 2023

New to Sophos Email: On-demand clawback, Google directory sync, and more

Products & Services

Sophos Email

Sophos Email Advanced

Goldfish,Fishing,Lure,Underwater,On,Blue,Sky,Background.,Copy,Space

七月 20, 2023

Bad ad fad leads to IcedID, Gozi infections

Security Operations

Threat Research

BatLoader

Cybercrime Forums

FakeBat

Featured

Gozi

IcedID

malvertising

MDR

Sophos X-Ops

七月 18, 2023

Sophos Discovers Ransomware Abusing “Sophos” Name

Threat Research

brand abuse

brandjacking

Featured

Raas

Ransomware

Sophos

七月 18, 2023

Sophos Firewall Receives the 2023 Competitive Strategy Leadership Award

Products & Services

Awards

Featured

Firewall

network

七月 13, 2023

The State of Ransomware in Financial Services 2023

Products & Services

Finance

Ransomware

Solutions

七月 11, 2023

Microsoft Revokes Malicious Drivers in Patch Tuesday Culling

Threat Research

2023-07

anti-EDR

drivers

drivers.stl

EDR

Featured

Fivesys

FK_Undead

FU rootkit

Netfilter

Patch Tuesday

patches

rootkit

Sophos X-Ops

UAC

WFP

Windows Filtering Platform

Windows Update