threat research – PossibleThreat Articles

I file Scalable Vector Graphics rappresentano una nuova minaccia di phishing

February 6, 2025 0 Comments .svg, featured, phishing, scalable vector graphics, Spam, threat research

Credit to Author: Andrew Brandt| Date: Thu, 06 Feb 2025 09:59:16 +0000

Il formato dei file SVG può ospitare codice HTML, script e malware dannosi

I criminali informatici non sembrano ancora del tutto convinti dell’intelligenza artificiale

February 6, 2025 0 Comments #chatgpt, AI, cybercrime forums, featured, scams, Social engineering, sophos x-ops, threat research

Credit to Author: Giusy Martin| Date: Thu, 30 Jan 2025 07:35:01 +0000

A un anno dalla nostra ricerca iniziale sull’atteggiamento degli aggressori nei confronti dell’IA generativa, abbiamo rivisitato alcuni forum clandestini e abbiamo scoperto che molti criminali informatici sono ancora scettici, anche se c’è stato un lieve cambiamento

Security Sophos

Sophos MDR intercetta due campagne di ransomware che utilizzano l”email bombing” e il “vishing” di Microsoft Teams

February 6, 2025 0 Comments black basta, featured, Fin7, java malware, legitimate service abuse, microsoft office 365, python malware, quick assist, remote machine management, security operations, stac5143, stac5777, teams, threat research

Credit to Author: Giusy Martin| Date: Thu, 23 Jan 2025 07:13:28 +0000

Sophos MDR ha inoltre identificato un nuovo cluster di minacce che si rifà allo schema di Storm-1811 e un’attività più intensa di quella originale collegata al ransomware Black Basta

Security Sophos

Gootloader: tutto quello che c’è da sapere

February 6, 2025 0 Comments featured, gootkit, gootloader, hellodolly, jscript, malicious seo, malware, obfuscation, php, php shell, seo, threat research, Wordpress, yara

Credit to Author: Gabor Szappanos| Date: Tue, 21 Jan 2025 06:57:16 +0000

L’intelligence open-source rivela il codice lato server di questo malware SEO-driven

Security Sophos

Il Patch Tuesday di gennaio con 159 CVE supera il record del singolo mese

February 6, 2025 0 Comments cve-2025-21298, featured, Microsoft, Microsoft Windows, ole, Patch Tuesday, RTF, threat research

Credit to Author: Angela Gunn| Date: Thu, 16 Jan 2025 07:30:18 +0000

Tenetevi forte… e per il momento prendete in considerazione l’idea di leggere le vostre email in chiaro

Security Sophos

Prioritizzazione delle patch: un’analisi approfondita di framework e strumenti – Parte 1: CVSS

February 6, 2025 0 Comments cvss, Patch Tuesday, Patching, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Thu, 09 Jan 2025 07:38:33 +0000

Questo è il primo di due articoli che esplorano gli strumenti e i framework che possono aiutare le organizzazioni a stabilire le priorità di rimedio. In questo primo articolo, Sophos X-Ops analizza il Common Vulnerability Scoring System (CVSS)

Security Sophos

Scalable Vector Graphics files pose a novel phishing threat

February 5, 2025 0 Comments .svg, featured, phishing, scalable vector graphics, Spam, threat research

Credit to Author: Andrew Brandt| Date: Wed, 05 Feb 2025 17:01:03 +0000

The SVG file format can harbor malicious HTML, scripts, and malware

Security Sophos

Update: Cybercriminals still not fully on board the AI train (yet)

January 28, 2025 0 Comments #chatgpt, AI, cybercrime forums, featured, scams, Social engineering, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Tue, 28 Jan 2025 13:00:45 +0000

A year after our initial research on threat actors’ attitudes to generative AI, we revisit some underground forums and find that many cybercriminals are still skeptical – although there has been a slight shift

Security Sophos

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”

January 21, 2025 0 Comments black basta, featured, Fin7, java malware, legitimate service abuse, microsoft office 365, python malware, quick assist, remote machine management, security operations, stac5143, stac5777, teams, threat research

Credit to Author: gallagherseanm| Date: Tue, 21 Jan 2025 11:30:14 +0000

Sophos MDR identifies a new threat cluster riffing on the playbook of Storm-1811, and amped-up activity from the original connected to Black Basta ransomware.

Security Sophos

Gootloader inside out

January 16, 2025 0 Comments featured, gootkit, gootloader, hellodolly, jscript, malicious seo, malware, obfuscation, php, php shell, seo, threat research, Wordpress, yara

Credit to Author: Gabor Szappanos| Date: Thu, 16 Jan 2025 17:00:02 +0000

Open-source intelligence reveals the server-side code of this pernicious SEO-driven malware – without needing a lawyer afterward

← Previous