sophos x-ops – Page 7 – PossibleThreat Articles

The scammers who scam scammers on cybercrime forums: Part 2

December 14, 2022 0 Comments breachforums, Exploit, marketplaces, RaidForums, scams, sophos x-ops, threat research, XSS

Credit to Author: Matt Wixey| Date: Wed, 14 Dec 2022 12:00:20 +0000

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the second part of our series, we look at the different flavors of scams prevalent on criminal forums

Security Sophos

Signed driver malware moves up the software trust chain

December 13, 2022 0 Comments 2022-12, adv220005, burntcigar, byovd, cuba ransomware, driver signature enforcement, drivers, featured, Patch Tuesday, sbom, security operations, signed drivers, sophos x-ops, supply chain compromise, threat research, whcp, whql, Windows, x-ops

Credit to Author: Andrew Brandt| Date: Tue, 13 Dec 2022 18:00:15 +0000

The criminals signed their AV-killer malware, closely related to one known as BURNTCIGAR, with a legitimate WHCP certificate

Security Sophos

The scammers who scam scammers on cybercrime forums: Part 1

December 7, 2022 0 Comments aaas, breachforums, Exploit, featured, marketplaces, RaidForums, scams, sophos x-ops, threat research, XSS

Credit to Author: Matt Wixey| Date: Wed, 07 Dec 2022 17:00:36 +0000

A shadowy sub-economy is more than just a curiosity – it’s booming business, and also an opportunity for defenders. In the first of a four-part series, we look at the forums involved, and how they deal with scammers scamming scammers

Security Sophos

LockBit 3.0 ‘Black’ attacks and leaks reveal wormable capabilities and tooling

November 30, 2022 0 Comments 0xabababab, blackmatter, featured, lockbit, lockbit black, Ransomware, sophos x-ops, threat research

Credit to Author: Andrew Brandt| Date: Wed, 30 Nov 2022 12:00:17 +0000

Reverse-engineering reveals close similarities to BlackMatter ransomware, with some improvements

Security Sophos

Detection Tools and Human Analysis Lead to a Security Non-Event

November 30, 2022 0 Comments mdr, sophos mdr, sophos x-ops, spearphishing, threat research

Credit to Author: Angela Gunn| Date: Wed, 30 Nov 2022 12:00:13 +0000

A look at how MDR turned a targeted attack into a non-event, in which no high-value credentials are compromised and several dozen employees are not tricked into letting a bad guy get boots on the ground

Security Sophos

Sophos 2023 Threat Report: the continued evolution of “Crime-as-a-Service”

November 17, 2022 0 Comments annual threat report, featured, sophos x-ops, threat research

Credit to Author: gallagherseanm| Date: Thu, 17 Nov 2022 12:00:05 +0000

Maturing marketplaces, capabilities-for-hire continue to proliferate professional tools, techniques and practices across the threat spectrum.

Security Sophos

Microsoft patches 62 vulnerabilities, including Kerberos, and Mark of the Web, and Exchange…sort of

November 8, 2022 0 Comments Microsoft, Patch Tuesday, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Tue, 08 Nov 2022 18:05:18 +0000

Still no fix for ProxyNotShell, but two MOTW bypasses get squashed

Security Sophos

Family Tree: DLL-Sideloading Cases May Be Related

November 4, 2022 0 Comments dll side-load, featured, sophos x-ops, threat research, x-ops

Credit to Author: Gabor Szappanos| Date: Thu, 03 Nov 2022 12:03:13 +0000

A threat actor’s repeated use of DLL-hijack execution flow makes for interesting attack results, including omnivorous file ingestion; we break down five cases and find commonalities

Security Sophos

Family Tree: Related DLL-Sideloading Cases Bear Strange Fruit

November 3, 2022 0 Comments dll side-load, featured, sophos x-ops, threat research, x-ops

Credit to Author: Gabor Szappanos| Date: Thu, 03 Nov 2022 12:03:13 +0000

A threat actor’s repeated use of DLL-hijack execution flow makes for interesting attack results, including omnivorous file ingestion; we break down five cases and find commonalities

Security Sophos

For Cybersecurity Awareness Month, how about better cybersecurity advice?

October 13, 2022 0 Comments advice, cybersecurity awareness month, end user, security operations, sophos x-ops

Credit to Author: Chester Wisniewski| Date: Thu, 13 Oct 2022 11:00:07 +0000

Let us be frank: The same old warnings to users aren’t cutting it, and it’s the technologists’ fault. Chester Wisniewski lays out a wiser way.