#sophos — Public Fediverse posts

Deepfakes are getting harder to spot, but video isn't the biggest threat.

Sophos SVP Rob Harrison explains why AI voice deepfakes pose the real danger—stripping away visual cues to fool even seasoned staff through hyper-personalized social engineering.

Here is why buying more tools won't fix security gaps and how defenders can turn AI to their advantage:

https://www.techfinitive.com/interviews/rob-harrison-svp-product-management-at-sophos/

#Cybersecurity #AI #Deepfakes #Sophos #TechFinitive #Security

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/dissecting-a-php-web-server-rootkit

Pulse ID: 6aa12d2fef480cc7edfcd3c7
Pulse Link: https://otx.alienvault.com/pulse/6aa12d2fef480cc7edfcd3c7
Pulse Author: CyberHunter_NL
Created: 2026-09-09 09:55:59

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #PHP #RCE #Rootkit #Sophos #bot #CyberHunter_NL

Linux Rootkit Injects Fileless PHP Web Shells Into Compromised F5 BIG-IP Servers

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/dissecting-a-php-web-server-rootkit

Pulse ID: 6a9ede94dbcc391c11b9dde8
Pulse Link: https://otx.alienvault.com/pulse/6a9ede94dbcc391c11b9dde8
Pulse Author: CyberHunter_NL
Created: 2026-09-07 15:56:04

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #Linux #OTX #OpenThreatExchange #PHP #RCE #Rootkit #Sophos #bot #CyberHunter_NL

Dissecting a PHP web server rootkit

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/dissecting-a-php-web-server-rootkit

Pulse ID: 6a9e98258feba9bd6af09e8c
Pulse Link: https://otx.alienvault.com/pulse/6a9e98258feba9bd6af09e8c
Pulse Author: CyberHunter_NL
Created: 2026-09-07 10:55:33

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #PHP #RCE #Rootkit #Sophos #bot #CyberHunter_NL

The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours

Indicators extracted from public reporting. Source: https://www.sophos.com/en-gb/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a99442e4ccc39298527e2be
Pulse Link: https://otx.alienvault.com/pulse/6a99442e4ccc39298527e2be
Pulse Author: CyberHunter_NL
Created: 2026-09-03 09:55:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #EDR #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

Uploaded it to #Sophos and it flags it as Malicious because of "Reputation" and cites a 28/69 VirusTotal score. But lists everything else as "Likely Clean"

LOL how many of the reports on virustotal are because of the AntiVirus vendors running it through virustotal?!?

Ungentlemanly behavior: Insights into a ransomware operation

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation

Pulse ID: 6a96cb5615095a006b6b7756
Pulse Link: https://otx.alienvault.com/pulse/6a96cb5615095a006b6b7756
Pulse Author: CyberHunter_NL
Created: 2026-09-01 12:55:50

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Sophos #bot #CyberHunter_NL

Hackers Are Turning Claude, ChatGPT and Copilot Into Bait for Real Malware

Indicators extracted from public reporting. Source: https://www.sophos.com/en-us/blog/fake-ai-real-malware-attackers-impersonating-ai-brands

Pulse ID: 6a86f98c275c08144774ab14
Pulse Link: https://otx.alienvault.com/pulse/6a86f98c275c08144774ab14
Pulse Author: CyberHunter_NL
Created: 2026-08-20 12:56:44

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ChatGPT #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #Sophos #bot #CyberHunter_NL

Pay up or not? #Ransomware surge has victims facing tough choices.

Nearly half of companies that are targets of a ransomware #cyber #attack end up paying a #ransom to release their data or systems, according to 2025 research from #cybersecurity group #Sophos , while the median amount demanded is rising.
#security #privacy

https://arstechnica.com/security/2026/07/pay-up-or-not-ransomware-surge-has-victims-facing-tough-choices/

📬 Hola Browser verteilt heimlich Monero-Miner nach Supply-Chain-Angriff
#Cyberangriffe #ITSicherheit #AviRazCohen #HolaBrowser #KryptoMiner #Monero #ProxyKnoten #Sophos #Sygnia https://sc.tarnkappe.info/68bcf0

Sophos scopre il laboratorio AI per testare l’evasione degli EDR: così il ransomware si evolve

https://insicurezzadigitale.com/sophos-scopre-il-laboratorio-ai-per-testare-levasione-degli-edr-cosi-il-ransomware-si-evolve/

📰 Sophos Uncovers AI-Powered Malware Lab Built to Evade EDR Solutions

🤖 Rise of the AI-assisted hacker: Sophos uncovers a malware lab where a ransomware group uses AI (Claude Opus) to automate the creation of malware that evades top EDRs. This is the new frontier of the cybersecurity arms race. #AI #Malware #EDR #Sophos

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/threat-actor-builds-ai-powered-malware-lab-for-edr-evasion/?utm_source=mastodon&utm_…

Additional resource:

There is a DEFCON talk about a 5+ year campaign by Chinese APTs targeting Sophos.

https://www.youtube.com/watch?v=MsRo12h0mrg

#cybersecurity #infosec #defcon #apt #sophos

Watched the latest episode of Darknet Diaries.

It's an interesting hack case, and raising a dilemma of "security products".

As you watch this video, you gonna raise some eyebrows.

A:"Hmm, you guys can force updates?!"
"You guys can plant an implant to *spy* on us?!"

B: "But... without it, we can't get further information of these fucking nation state actors are doing to stop them"
"ALSO we are being transparent here"

https://www.youtube.com/watch?v=QzI9ig-DFoc

#cybersecurity #infosec #apt #sophosFirewall #sophos #spyware #darknetdiaries

Sophos Home Premium for Mac Review: Affordable Remote Security With Trade-Offs

Sophos Home Premium offers Mac antivirus protection at a low price, but it lacks independent testing lab verification and the advanced features found in the Windows edition.

https://www.pcmag.com/reviews/sophos-home-premium-for-mac

#sophos #antivirus #macantivirus #pcmag

Sophos Home Premium Review: Cloud-Managed Security at a Bargain Price

The affordable Sophos Home Premium expands on basic antivirus protection by integrating features from the company's enterprise-level solutions, with configuration managed remotely.

https://www.pcmag.com/reviews/sophos-home-premium

#sophos #pcmag #antivirus

🆕 Here's how to deploy a Sophos firewall on VMware vCenter

https://thedxt.ca/2026/03/deploy-sophos-firewall-on-vmware-vcenter/

#VMware #vCenter #vExpert #Sophos #Firewall #Networking #SFOS @sophos

🧑‍💻 Here's how to complete the initial setup of a Sophos firewall.

https://thedxt.ca/2026/03/sophos-firewall-initial-setup/

#Sophos #Firewall #Networking #SFOS #Setup @sophos

🗺️ When you setup a Sophos VM firewall on vSphere and add new interfaces the mappings go out the window.

Here's how to figure out the mappings.

https://thedxt.ca/2026/03/sophos-firewall-interface-mapping-on-vsphere/

#Sophos #Firewall #Interface #SFOS @sophos #Networking #VMware #vExpert

🛜 Here's how to remove the GuestAP interface on a Sophos firewall.

https://thedxt.ca/2026/03/sophos-firewall-remove-guestap-interface/

#Sophos #Firewall #GuestAP #SFOS @sophos

Hey #infosec peoples - has anyone done quality testing of various DNS blocking providers?
e.g. something like take a grey noise list and see how quad nine compares to opendns etc ?

Considering whether to use #Sophos's new DNS protection...

Manufacturing is becoming a test bed for ransomware shifts https://www.helpnetsecurity.com/2025/12/15/sophos-manufacturing-ransomware-risks-report/ #manufacturingsector #threatdetection #cybersecurity #encryption #ransomware #report #Sophos #News

Anybody using #Sophos #firewall providing a #vpn here?

Is it possible to technically enforce that #SophosConnect will not save passwords? If so, how?

Sophos adds Intelix threat intelligence to Microsoft Security and 365 Copilot https://www.helpnetsecurity.com/2025/11/19/sophos-intelix-microsoft-integrations/ #Industrynews #Sophos

Retailers are learning to say no to ransom demands https://www.helpnetsecurity.com/2025/11/06/sophos-retail-ransomware-recovery-report/ #cybersecurity #encryption #ransomware #extortion #report #retail #Sophos #News

Happy Monday!

How's yours so far?

( #sophos XDR ate my #tailscale installations. )

Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287) https://www.helpnetsecurity.com/2025/10/30/wsus-vulnerability-infostealer-cve-2025-59287/ #PaloAltoNetworks #WindowsServer #EyeSecurity #Don'tmiss #Darktrace #datatheft #Hotstuff #Huntress #malware #Sophos #News

Sophos ITDR enhances identity security with dark web monitoring and automated response https://www.helpnetsecurity.com/2025/10/21/sophos-itdr/ #Industrynews #Sophos

Legit tools, illicit uses: Velociraptor, Nezha turned against victims https://www.helpnetsecurity.com/2025/10/09/velociraptor-nezha-attackers-misuse/ #attacktools #opensource #ransomware #Don'tmiss #Hotstuff #Huntress #Sophos #Cisco #News #APT