#sophos — Public Fediverse posts

The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours

Indicators extracted from public reporting. Source: https://www.sophos.com/en-gb/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a99442e4ccc39298527e2be
Pulse Link: https://otx.alienvault.com/pulse/6a99442e4ccc39298527e2be
Pulse Author: CyberHunter_NL
Created: 2026-09-03 09:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #EDR #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours

Indicators extracted from public reporting. Source: https://www.sophos.com/en-gb/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a99442e4ccc39298527e2be
Pulse Link: https://otx.alienvault.com/pulse/6a99442e4ccc39298527e2be
Pulse Author: CyberHunter_NL
Created: 2026-09-03 09:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #EDR #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours

Indicators extracted from public reporting. Source: https://www.sophos.com/en-gb/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a99442e4ccc39298527e2be
Pulse Link: https://otx.alienvault.com/pulse/6a99442e4ccc39298527e2be
Pulse Author: CyberHunter_NL
Created: 2026-09-03 09:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #EDR #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours

Indicators extracted from public reporting. Source: https://www.sophos.com/en-gb/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a99442e4ccc39298527e2be
Pulse Link: https://otx.alienvault.com/pulse/6a99442e4ccc39298527e2be
Pulse Author: CyberHunter_NL
Created: 2026-09-03 09:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #EDR #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours

Indicators extracted from public reporting. Source: https://www.sophos.com/en-gb/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a99442e4ccc39298527e2be
Pulse Link: https://otx.alienvault.com/pulse/6a99442e4ccc39298527e2be
Pulse Author: CyberHunter_NL
Created: 2026-09-03 09:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #EDR #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

Uploaded it to #Sophos and it flags it as Malicious because of "Reputation" and cites a 28/69 VirusTotal score. But lists everything else as "Likely Clean"

LOL how many of the reports on virustotal are because of the AntiVirus vendors running it through virustotal?!?

Ungentlemanly behavior: Insights into a ransomware operation

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a96cb5615095a006b6b7756
Pulse Link: https://otx.alienvault.com/pulse/6a96cb5615095a006b6b7756
Pulse Author: CyberHunter_NL
Created: 2026-09-01 12:55:50

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

Hackers Are Turning Claude, ChatGPT and Copilot Into Bait for Real Malware

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/fake-ai-real-malware-attackers-impersonating-ai-brands

Pulse ID: 6a86f98c275c08144774ab14
Pulse Link: https://otx.alienvault.com/pulse/6a86f98c275c08144774ab14
Pulse Author: CyberHunter_NL
Created: 2026-08-20 12:56:44

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ChatGPT #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #Sophos #bot #CyberHunter_NL

deno-case-studies

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/deno-case-studies

Pulse ID: 6a7c7b59412e34c4ea97e1b9
Pulse Link: https://otx.alienvault.com/pulse/6a7c7b59412e34c4ea97e1b9
Pulse Author: CyberHunter_NL
Created: 2026-08-12 13:55:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RCE #Sophos #bot #CyberHunter_NL

ClickFix campaign abuses Deno runtime for infostealer delivery

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/clickfix-campaign-abuses-deno-runtime-for-infostealer-delivery

Pulse ID: 6a7c7b5dcc776888b41f6fab
Pulse Link: https://otx.alienvault.com/pulse/6a7c7b5dcc776888b41f6fab
Pulse Author: CyberHunter_NL
Created: 2026-08-12 13:55:41

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #InfoStealer #OTX #OpenThreatExchange #RCE #Sophos #bot #CyberHunter_NL

Interlock Turns the Tools Incident Responders Use Into Weapons for Stealing Windows Passwords

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/2608-volatility-interlock

Pulse ID: 6a79bc46463f0e5b18330442
Pulse Link: https://otx.alienvault.com/pulse/6a79bc46463f0e5b18330442
Pulse Author: CyberHunter_NL
Created: 2026-08-10 11:55:50

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Password #Passwords #RCE #Sophos #Windows #Word #bot #CyberHunter_NL

Pay up or not? #Ransomware surge has victims facing tough choices.

Nearly half of companies that are targets of a ransomware #cyber #attack end up paying a #ransom to release their data or systems, according to 2025 research from #cybersecurity group #Sophos , while the median amount demanded is rising.
#security #privacy

https://arstechnica.com/security/2026/07/pay-up-or-not-ransomware-surge-has-victims-facing-tough-choices/

📬 Hola Browser verteilt heimlich Monero-Miner nach Supply-Chain-Angriff
#Cyberangriffe #ITSicherheit #AviRazCohen #HolaBrowser #KryptoMiner #Monero #ProxyKnoten #Sophos #Sygnia https://sc.tarnkappe.info/68bcf0

Sophos scopre il laboratorio AI per testare l’evasione degli EDR: così il ransomware si evolve

https://insicurezzadigitale.com/sophos-scopre-il-laboratorio-ai-per-testare-levasione-degli-edr-cosi-il-ransomware-si-evolve/

📰 Sophos Uncovers AI-Powered Malware Lab Built to Evade EDR Solutions

🤖 Rise of the AI-assisted hacker: Sophos uncovers a malware lab where a ransomware group uses AI (Claude Opus) to automate the creation of malware that evades top EDRs. This is the new frontier of the cybersecurity arms race. #AI #Malware #EDR #Sophos

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/threat-actor-builds-ai-powered-malware-lab-for-edr-evasion/?utm_source=mastodon&utm_…

Additional resource:

There is a DEFCON talk about a 5+ year campaign by Chinese APTs targeting Sophos.

https://www.youtube.com/watch?v=MsRo12h0mrg

#cybersecurity #infosec #defcon #apt #sophos

Watched the latest episode of Darknet Diaries.

It's an interesting hack case, and raising a dilemma of "security products".

As you watch this video, you gonna raise some eyebrows.

A:"Hmm, you guys can force updates?!"
"You guys can plant an implant to *spy* on us?!"

B: "But... without it, we can't get further information of these fucking nation state actors are doing to stop them"
"ALSO we are being transparent here"

https://www.youtube.com/watch?v=QzI9ig-DFoc

#cybersecurity #infosec #apt #sophosFirewall #sophos #spyware #darknetdiaries

Sophos Home Premium for Mac Review: Affordable Remote Security With Trade-Offs

Sophos Home Premium offers Mac antivirus protection at a low price, but it lacks independent testing lab verification and the advanced features found in the Windows edition.

https://www.pcmag.com/reviews/sophos-home-premium-for-mac

#sophos #antivirus #macantivirus #pcmag

Sophos Home Premium Review: Cloud-Managed Security at a Bargain Price

The affordable Sophos Home Premium expands on basic antivirus protection by integrating features from the company's enterprise-level solutions, with configuration managed remotely.

https://www.pcmag.com/reviews/sophos-home-premium

#sophos #pcmag #antivirus

🆕 Here's how to deploy a Sophos firewall on VMware vCenter

https://thedxt.ca/2026/03/deploy-sophos-firewall-on-vmware-vcenter/

#VMware #vCenter #vExpert #Sophos #Firewall #Networking #SFOS @sophos

🧑‍💻 Here's how to complete the initial setup of a Sophos firewall.

https://thedxt.ca/2026/03/sophos-firewall-initial-setup/

#Sophos #Firewall #Networking #SFOS #Setup @sophos

🗺️ When you setup a Sophos VM firewall on vSphere and add new interfaces the mappings go out the window.

Here's how to figure out the mappings.

https://thedxt.ca/2026/03/sophos-firewall-interface-mapping-on-vsphere/

#Sophos #Firewall #Interface #SFOS @sophos #Networking #VMware #vExpert

🛜 Here's how to remove the GuestAP interface on a Sophos firewall.

https://thedxt.ca/2026/03/sophos-firewall-remove-guestap-interface/

#Sophos #Firewall #GuestAP #SFOS @sophos

Hey #infosec peoples - has anyone done quality testing of various DNS blocking providers?
e.g. something like take a grey noise list and see how quad nine compares to opendns etc ?

Considering whether to use #Sophos's new DNS protection...

Manufacturing is becoming a test bed for ransomware shifts https://www.helpnetsecurity.com/2025/12/15/sophos-manufacturing-ransomware-risks-report/ #manufacturingsector #threatdetection #cybersecurity #encryption #ransomware #report #Sophos #News

Anybody using #Sophos #firewall providing a #vpn here?

Is it possible to technically enforce that #SophosConnect will not save passwords? If so, how?

Sophos adds Intelix threat intelligence to Microsoft Security and 365 Copilot https://www.helpnetsecurity.com/2025/11/19/sophos-intelix-microsoft-integrations/ #Industrynews #Sophos

Retailers are learning to say no to ransom demands https://www.helpnetsecurity.com/2025/11/06/sophos-retail-ransomware-recovery-report/ #cybersecurity #encryption #ransomware #extortion #report #retail #Sophos #News

Happy Monday!

How's yours so far?

( #sophos XDR ate my #tailscale installations. )

Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287) https://www.helpnetsecurity.com/2025/10/30/wsus-vulnerability-infostealer-cve-2025-59287/ #PaloAltoNetworks #WindowsServer #EyeSecurity #Don'tmiss #Darktrace #datatheft #Hotstuff #Huntress #malware #Sophos #News

Sophos ITDR enhances identity security with dark web monitoring and automated response https://www.helpnetsecurity.com/2025/10/21/sophos-itdr/ #Industrynews #Sophos

Legit tools, illicit uses: Velociraptor, Nezha turned against victims https://www.helpnetsecurity.com/2025/10/09/velociraptor-nezha-attackers-misuse/ #attacktools #opensource #ransomware #Don'tmiss #Hotstuff #Huntress #Sophos #Cisco #News #APT

Nehmt proprietäre #itsecurity haben sie gesagt. Wird schon sicher sein haben sie gesagt.

https://www.borncity.com/blog/2025/09/26/cisco-adaptive-security-appliance-wird-ueber-0-day-angegriffen/

Nahezu wöchentlich klopfen irgendwelche Systemhäuser mit #itsecurity bei mir in der Firma an. Sobald #cisco, #fortigate, #sophos oder #watchguard fallen ist das Gespräch vorbei. Diese Leute haben nichts verstanden, es reicht eben nicht sich eine nette Appliance mit blauem Schoss auf der Verpackung in den Serverschrank zu nageln!

SailPoint IPO Signals Bright Spot for Cybersecurity https://www.securityweek.com/sailpoint-ipo-signals-bright-spot-for-cybersecurity/ #Identity&Access #PingIdentity #Funding/M&A #Proofpoint #ThomaBravo #SailPoint #Sophos #IPO

SailPoint IPO Signals Bright Spot for Cybersecurity https://www.securityweek.com/sailpoint-ipo-signals-bright-spot-for-cybersecurity/ #Identity&Access #PingIdentity #Funding/M&A #Proofpoint #ThomaBravo #SailPoint #Sophos #IPO

Find out which cyber threats you should be concerned about https://www.helpnetsecurity.com/2024/06/05/cyber-threat-landscape-statistics-2024/ #ArcticWolfNetworks #SecurityScorecard #AbnormalSecurity #CorvusInsurance #cybersecurity #VIPRESecurity #CatoNetworks #GitGuardian #NTTSecurity #VikingCloud #CheckPoint #cybercrime #Proofpoint #ReliaQuest #Don'tmiss #Trustpair #Hotstuff #BitSight #Mimecast #SpyCloud #Claroty #Delinea #Imperva #Verizon #Zscaler #Egress #report #Socure #Sophos #survey #AtBay

Cybercrime stats you can’t ignore https://www.helpnetsecurity.com/2024/05/07/cybercrime-stats-2024/ #GuidePointSecurity #SecurityScorecard #AbnormalSecurity #OstermanResearch #cybersecurity #VIPRESecurity #cybercrime #Ironscales #ReliaQuest #Don'tmiss #Trustwave #Hotstuff #SpyCloud #Cofense #Imperva #Akamai #Egress #report #Sophos #survey #Thales #News #Visa