B2B cyber security

Incident response put to the test

30 April 2021

Companies and organizations are under enormous pressure in the event of a cyber attack, because the correct reaction to an incident is time-consuming, but at the same time requires quick action. The incident response experts at Sophos have therefore developed a guide to help companies cope with this difficult task. These four tips are based on the hands-on experience of the Managed Threat Response and Rapid Response teams who have collectively responded to thousands of cyber security incidents. 1. React as quickly as possible When a company is attacked, every second counts. In-house security teams often need to ...

Attackers use Exchange vulnerability for crypto miners

20 April 2021

| No comments

| Short news, Sophos

Sophos Labs has identified an attacker using an Exchange vulnerability for cryptomining: “Admins should scan the Exchange server for web shells and monitor servers for unusual processes that appear to appear out of nowhere. High processor usage by an unknown program could be a sign of crypto mining activity or ransomware,” said Andrew Brandt, Principal Threat Researcher at Sophos. The well-known, recent problems relating to the Microsoft Exchange Server vulnerabilities are far from over: Even after the security patches of March 2nd and 9th, new attackers are still using the exploit for their attacks...

Reality of AI in cybersecurity

12 April 2021

| No comments

| Sophos, Stories

There is a lot of hype surrounding the use of artificial intelligence (AI) in cybersecurity. The truth is that the role and potential of AI in security are still evolving and much remains to be researched and evaluated. a comment by Chester Wisniewski, Principal Research Scientist, Sophos. In order to further develop AI as quickly as possible and to be able to use it even more efficiently in security, the overarching exchange between researchers and AI experts is particularly important. For this reason, Sophos AI is committed to sharing its research results openly with the ...

DearCry targets Microsoft Exchange vulnerability

March 29, 2021

| No comments

| Short news, Sophos

Hafnium Microsoft Exchange Hack: Was the DearCry ransomware prototype entered? Sophos experts have investigated the ransomware and discovered similarities with WannaCry. Since the Microsoft Exchange vulnerabilities became known last week, the focus has been on cyberattacks that exploit this vulnerability. Above all, the ransomware "DearCry" has made an inglorious name for itself, which at first glance reminds of a prominent predecessor called "WannaCry". Sophos Labs took a closer look at the new malware and found a lot of evidence that it could be an as yet unknown ransomware prototype. DearCry: ransomware ...

Sophos decrypts DNA fileless malware

March 23, 2021

| No comments

| PR News, Sophos

Sophos decrypts the DNA of fileless malware - and introduces new protection technology. Dynamic Shellcode Protection detects malware such as ransomware or remote access agents running in the temporary memory and thus blocks a popular hacking technique to bypass protection programs. Sophos presents its new protection against cyberattacks, in which malware is loaded into the temporary memory of the affected computer without files. Dynamic Shellcode Protection is integrated in Sophos Intercept X and can prevent attack code from nesting in the dynamic heap region of the memory. Memory: popular hiding place for malware The memory area of a hacked computer is a ...

Intercept X protects Snapdragon computing platforms

March 19, 2021

| No comments

| PR News, Sophos

Sophos Intercept X keeps Qualcomm's Snapdragon computing platforms safe. Next generation cybersecurity for PCs with 5G technology. Sophos today announced its plans to provide Intercept X endpoint protection for 5G PCs based on Qualcomm® Snapdragon ™ computing platforms from Qualcomm Technologies Inc. The combination of Sophos Intercept X with Snapdragon computing platforms offers users a next-generation security environment in a PC environment that is active around the clock and always connected to the Internet. Sophos Intercept X for Snapdragon Compute Platforms is expected to be available in the second half of 2021….

Gootloader: Banking Trojan mutates into malware platform

March 16, 2021

| No comments

| Short news, Sophos

“Gootkit” becomes “Gootloader”: Banking Trojan mutates into a complex malware platform with multiple attack vectors. The Gootkit malware family is a well-known henchman - a Trojan that initially focuses on the theft of banking business data and today uses the Cobalt-Strike analysis tool, the Kronos banking malware and the REvil ransomware, among other things. IT security experts have already dealt intensively with the malware and, in particular, with its clever transmission mechanisms in 2020. What is new is that the attackers have expanded the malware into a multi-payload platform. With variable attack mechanisms - including social engineering - it is strongest in Germany today ...

Conti ransomware attack in the live report

March 8, 2021

| No comments

| Sophos, Stories

Five days in close contact with Conti ransomware: Sophos describes in three reports in detail the procedure of a real Conti ransomware attack and how it was stopped. Also included: attack behavior, technical background and practical tips for IT administrators. Conti ransomware attacks, which have been wreaking havoc since the middle of last year, are an impressive example of how cybercriminals use modern and sophisticated technology to plan their attacks in a targeted manner and thus greatly improve their chances of successfully penetrating company networks. In three detailed reports, the Sophos Rapid Response team describes a real attack and the course over five days: "This was a very fast ...

Crisis communication in the event of data theft

March 5, 2021

| No comments

| Sophos, Stories

Data disaster Data theft - this is how crisis communication works. The nightmare for every company: a cyber attack resulted in a data theft. How can this worst-case scenario, not to mention the financial and material damage, be overcome in terms of communication without losing customers or shareholders? In a discussion, Sophos and Associate Professor Jason RC Nurse from the University of Kent developed important answers and a guide to this essential question. When the IT security meltdown has occurred and cyber criminals have been able to steal large amounts of company data, forensic questions such as uncovering the gateways and ...

Category: Sophos

Incident response put to the test

Attackers use Exchange vulnerability for crypto miners

Reality of AI in cybersecurity

DearCry targets Microsoft Exchange vulnerability

Sophos decrypts DNA fileless malware

Intercept X protects Snapdragon computing platforms

Gootloader: Banking Trojan mutates into malware platform

Conti ransomware attack in the live report

Crisis communication in the event of data theft

Which user group do you belong to? (No tracking!)

Important links

Latest Articles & News

It was searched for

Social Media