#sophos — Public Fediverse posts

Seid ihr auch so froh, dass wir vollautoamtisierte Threat-Detection-Software mit fortgeschrittenen Heuristiken haben, die keine Probleme mit dem total vergammelten JS-Zeug da draußen haben

#Sophos

Deepfakes are getting harder to spot, but video isn't the biggest threat.

Sophos SVP Rob Harrison explains why AI voice deepfakes pose the real danger—stripping away visual cues to fool even seasoned staff through hyper-personalized social engineering.

Here is why buying more tools won't fix security gaps and how defenders can turn AI to their advantage:

https://www.techfinitive.com/interviews/rob-harrison-svp-product-management-at-sophos/

#Cybersecurity #AI #Deepfakes #Sophos #TechFinitive #Security

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/dissecting-a-php-web-server-rootkit

Pulse ID: 6aa12d2fef480cc7edfcd3c7
Pulse Link: https://otx.alienvault.com/pulse/6aa12d2fef480cc7edfcd3c7
Pulse Author: CyberHunter_NL
Created: 2026-09-09 09:55:59

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #PHP #RCE #Rootkit #Sophos #bot #CyberHunter_NL

Linux Rootkit Injects Fileless PHP Web Shells Into Compromised F5 BIG-IP Servers

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/dissecting-a-php-web-server-rootkit

Pulse ID: 6a9ede94dbcc391c11b9dde8
Pulse Link: https://otx.alienvault.com/pulse/6a9ede94dbcc391c11b9dde8
Pulse Author: CyberHunter_NL
Created: 2026-09-07 15:56:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Linux #OTX #OpenThreatExchange #PHP #RCE #Rootkit #Sophos #bot #CyberHunter_NL

Dissecting a PHP web server rootkit

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/dissecting-a-php-web-server-rootkit

Pulse ID: 6a9e98258feba9bd6af09e8c
Pulse Link: https://otx.alienvault.com/pulse/6a9e98258feba9bd6af09e8c
Pulse Author: CyberHunter_NL
Created: 2026-09-07 10:55:33

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #PHP #RCE #Rootkit #Sophos #bot #CyberHunter_NL

The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours

Indicators extracted from public reporting. Source: https://www.sophos.com/en-gb/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a99442e4ccc39298527e2be
Pulse Link: https://otx.alienvault.com/pulse/6a99442e4ccc39298527e2be
Pulse Author: CyberHunter_NL
Created: 2026-09-03 09:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #EDR #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

Uploaded it to #Sophos and it flags it as Malicious because of "Reputation" and cites a 28/69 VirusTotal score. But lists everything else as "Likely Clean"

LOL how many of the reports on virustotal are because of the AntiVirus vendors running it through virustotal?!?

Ungentlemanly behavior: Insights into a ransomware operation

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a96cb5615095a006b6b7756
Pulse Link: https://otx.alienvault.com/pulse/6a96cb5615095a006b6b7756
Pulse Author: CyberHunter_NL
Created: 2026-09-01 12:55:50

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

Hackers Are Turning Claude, ChatGPT and Copilot Into Bait for Real Malware

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/fake-ai-real-malware-attackers-impersonating-ai-brands

Pulse ID: 6a86f98c275c08144774ab14
Pulse Link: https://otx.alienvault.com/pulse/6a86f98c275c08144774ab14
Pulse Author: CyberHunter_NL
Created: 2026-08-20 12:56:44

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ChatGPT #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #Sophos #bot #CyberHunter_NL

Pay up or not? #Ransomware surge has victims facing tough choices.

Nearly half of companies that are targets of a ransomware #cyber #attack end up paying a #ransom to release their data or systems, according to 2025 research from #cybersecurity group #Sophos , while the median amount demanded is rising.
#security #privacy

https://arstechnica.com/security/2026/07/pay-up-or-not-ransomware-surge-has-victims-facing-tough-choices/

📬 Hola Browser verteilt heimlich Monero-Miner nach Supply-Chain-Angriff
#Cyberangriffe #ITSicherheit #AviRazCohen #HolaBrowser #KryptoMiner #Monero #ProxyKnoten #Sophos #Sygnia https://sc.tarnkappe.info/68bcf0

Sophos scopre il laboratorio AI per testare l’evasione degli EDR: così il ransomware si evolve

https://insicurezzadigitale.com/sophos-scopre-il-laboratorio-ai-per-testare-levasione-degli-edr-cosi-il-ransomware-si-evolve/

📰 Sophos Uncovers AI-Powered Malware Lab Built to Evade EDR Solutions

🤖 Rise of the AI-assisted hacker: Sophos uncovers a malware lab where a ransomware group uses AI (Claude Opus) to automate the creation of malware that evades top EDRs. This is the new frontier of the cybersecurity arms race. #AI #Malware #EDR #Sophos

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/threat-actor-builds-ai-powered-malware-lab-for-edr-evasion/?utm_source=mastodon&utm_…

Additional resource:

There is a DEFCON talk about a 5+ year campaign by Chinese APTs targeting Sophos.

https://www.youtube.com/watch?v=MsRo12h0mrg

#cybersecurity #infosec #defcon #apt #sophos

Watched the latest episode of Darknet Diaries.

It's an interesting hack case, and raising a dilemma of "security products".

As you watch this video, you gonna raise some eyebrows.

A:"Hmm, you guys can force updates?!"
"You guys can plant an implant to *spy* on us?!"

B: "But... without it, we can't get further information of these fucking nation state actors are doing to stop them"
"ALSO we are being transparent here"

https://www.youtube.com/watch?v=QzI9ig-DFoc

#cybersecurity #infosec #apt #sophosFirewall #sophos #spyware #darknetdiaries

Sophos Home Premium for Mac Review: Affordable Remote Security With Trade-Offs

Sophos Home Premium offers Mac antivirus protection at a low price, but it lacks independent testing lab verification and the advanced features found in the Windows edition.

https://www.pcmag.com/reviews/sophos-home-premium-for-mac

#sophos #antivirus #macantivirus #pcmag

Sophos Home Premium Review: Cloud-Managed Security at a Bargain Price

The affordable Sophos Home Premium expands on basic antivirus protection by integrating features from the company's enterprise-level solutions, with configuration managed remotely.

https://www.pcmag.com/reviews/sophos-home-premium

#sophos #pcmag #antivirus

🆕 Here's how to deploy a Sophos firewall on VMware vCenter

https://thedxt.ca/2026/03/deploy-sophos-firewall-on-vmware-vcenter/

#VMware #vCenter #vExpert #Sophos #Firewall #Networking #SFOS @sophos

🧑‍💻 Here's how to complete the initial setup of a Sophos firewall.

https://thedxt.ca/2026/03/sophos-firewall-initial-setup/

#Sophos #Firewall #Networking #SFOS #Setup @sophos

🗺️ When you setup a Sophos VM firewall on vSphere and add new interfaces the mappings go out the window.

Here's how to figure out the mappings.

https://thedxt.ca/2026/03/sophos-firewall-interface-mapping-on-vsphere/

#Sophos #Firewall #Interface #SFOS @sophos #Networking #VMware #vExpert

🛜 Here's how to remove the GuestAP interface on a Sophos firewall.

https://thedxt.ca/2026/03/sophos-firewall-remove-guestap-interface/

#Sophos #Firewall #GuestAP #SFOS @sophos

Hey #infosec peoples - has anyone done quality testing of various DNS blocking providers?
e.g. something like take a grey noise list and see how quad nine compares to opendns etc ?

Considering whether to use #Sophos's new DNS protection...

Manufacturing is becoming a test bed for ransomware shifts https://www.helpnetsecurity.com/2025/12/15/sophos-manufacturing-ransomware-risks-report/ #manufacturingsector #threatdetection #cybersecurity #encryption #ransomware #report #Sophos #News

Anybody using #Sophos #firewall providing a #vpn here?

Is it possible to technically enforce that #SophosConnect will not save passwords? If so, how?

Sophos adds Intelix threat intelligence to Microsoft Security and 365 Copilot https://www.helpnetsecurity.com/2025/11/19/sophos-intelix-microsoft-integrations/ #Industrynews #Sophos

Retailers are learning to say no to ransom demands https://www.helpnetsecurity.com/2025/11/06/sophos-retail-ransomware-recovery-report/ #cybersecurity #encryption #ransomware #extortion #report #retail #Sophos #News

Happy Monday!

How's yours so far?

( #sophos XDR ate my #tailscale installations. )

Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287) https://www.helpnetsecurity.com/2025/10/30/wsus-vulnerability-infostealer-cve-2025-59287/ #PaloAltoNetworks #WindowsServer #EyeSecurity #Don'tmiss #Darktrace #datatheft #Hotstuff #Huntress #malware #Sophos #News

Sophos ITDR enhances identity security with dark web monitoring and automated response https://www.helpnetsecurity.com/2025/10/21/sophos-itdr/ #Industrynews #Sophos

홈랩에 유용한 소프트웨어 라우터 비교
값비싼 관리형 L3 물리 스위치를 사기 보다는 #가상화 하는 방안도 있다.
일반 하드웨어 스위치의 스펙은 매우 낮은 편이다. 아톰 혹은 셀러론 등의 저가형 장비는 보안 기능을 적용하면 기가비트 트래픽 처리가 어렵다. VM을 쓰면 높지 않은 사양에서도 IPS나 Web Filtering 통한 Deep Packet Inspection 및 Application Control도 거뜬하다.
라우터를 가상화하면 소프트웨어정의인프라의 효용성을 간접 체감하며 여러 기능을 숙지할 수 있다.
1. 인터넷 모뎀에서 물리 스위치로 회선을 연결하며 VLAN을 태워 인터넷 전용 포트 그룹에 전달한다.
2. 내부 통신을 위한 VLAN TRUNK 포트 그룹을 만들어 소프트웨어 라우터에 연결한다.
3. 소프트웨어 라우터 VM에 두 포트 그룹을 연결한다.

#homelab #VyOS #pfSense #Untangle #Sophos #virtualization #홈랩

홈랩에 유용한 소프트웨어 라우터 비교
값비싼 관리형 L3 물리 스위치를 사기 보다는 #가상화 하는 방안도 있다.
일반 하드웨어 스위치의 스펙은 매우 낮은 편이다. 아톰 혹은 셀러론 등의 저가형 장비는 보안 기능을 적용하면 기가비트 트래픽 처리가 어렵다. VM을 쓰면 높지 않은 사양에서도 IPS나 Web Filtering 통한 Deep Packet Inspection 및 Application Control도 거뜬하다.
라우터를 가상화하면 소프트웨어정의인프라의 효용성을 간접 체감하며 여러 기능을 숙지할 수 있다.
1. 인터넷 모뎀에서 물리 스위치로 회선을 연결하며 VLAN을 태워 인터넷 전용 포트 그룹에 전달한다.
2. 내부 통신을 위한 VLAN TRUNK 포트 그룹을 만들어 소프트웨어 라우터에 연결한다.
3. 소프트웨어 라우터 VM에 두 포트 그룹을 연결한다.

#homelab #VyOS #pfSense #Untangle #Sophos #virtualization #홈랩

홈랩에 유용한 소프트웨어 라우터 비교
값비싼 관리형 L3 물리 스위치를 사기 보다는 #가상화 하는 방안도 있다.
일반 하드웨어 스위치의 스펙은 매우 낮은 편이다. 아톰 혹은 셀러론 등의 저가형 장비는 보안 기능을 적용하면 기가비트 트래픽 처리가 어렵다. VM을 쓰면 높지 않은 사양에서도 IPS나 Web Filtering 통한 Deep Packet Inspection 및 Application Control도 거뜬하다.
라우터를 가상화하면 소프트웨어정의인프라의 효용성을 간접 체감하며 여러 기능을 숙지할 수 있다.
1. 인터넷 모뎀에서 물리 스위치로 회선을 연결하며 VLAN을 태워 인터넷 전용 포트 그룹에 전달한다.
2. 내부 통신을 위한 VLAN TRUNK 포트 그룹을 만들어 소프트웨어 라우터에 연결한다.
3. 소프트웨어 라우터 VM에 두 포트 그룹을 연결한다.

#homelab #VyOS #pfSense #Untangle #Sophos #virtualization #홈랩