Tag: Sophos

Sophos thwarts ransomware attacks with a rare, malicious driver, but signed with a valid Microsoft digital certificate. The driver targets Endpoint Detection and Response (EDR) processes. The attack is linked to the Cuba Ransomware Group. Sophos found malicious code in several drivers signed with legitimate digital certificates. The new report, Signed Driver Malware Moves up the Software Trust Chain, details the investigation that began with an attempted ransomware attack. The attackers used a malicious driver that was bundled with a legitimate Microsoft Windows Hardware Compatibility Publisher digital certificate.

Threat Report 2023: Cybercrime as Big Business

19 December 2022

Cybercrime is increasingly flourishing as a business model, ransomware and ransomware-as-a-service are innovation drivers and stolen access data are increasingly acting as a cash cow. According to Sophos, the year 2023 also awaits companies in cyber defense. Sophos has published its 2023 Threat Report. Among other things, the report describes a new degree of commercialization within cybercrime, as a result of which low-threshold introductory offers are increasingly available for potential attackers: almost all scenarios can be bought. A booming cybercrime-as-a-service market caters to a criminal audience ranging from the highly tech-savvy to the completely ignorant. The topics of the current Sophos threat…

The right questions about managed security services

1 December 2022

Before companies choose an IT security solution, they should ask the provider of managed security services four critical questions. This is the only way you can be sure of finding a reliable partner to protect your company. The cybersecurity threat landscape is incredibly volatile. Cyber criminals are becoming more and more professional, specializing and even competing with other groups. As a result, companies are exposed to attacks not just once but repeatedly within months, weeks or days - sometimes even simultaneously. Labor shortages demand solutions The global cybersecurity labor shortage…

IT security study: Lack of skilled workers as a challenge

23 November 2022

According to a study in management levels in DA-CH, the availability of specialists is the greatest challenge - in Austria this even applies to external expertise. In Germany, Austria and Switzerland, the problems differ significantly, according to Sophos. Cyber security in companies has become even more important in the recent past due to various factors. These include technological developments or the growing complexity of IT infrastructures. But also those factors that are characterized by agile and mobile working, home office availability, the professionalization of cybercrime and an increased international threat situation are increasingly taking…

Ransomware: Manufacturing and production pays the highest ransom

7 November 2022

The Sophos State of Ransomware study shows that manufacturing and manufacturing companies worldwide paid rare ransoms, averaging over $2 million, but at the same time more than twice as much as companies in other industries. A frightening development. Sophos released this year's industry study, The State of Ransomware in Manufacturing and Production, which specifically looked at the manufacturing and production space. The study shows that this sector has the highest average ransom payments of any industry studied. Affected companies raised $2.036.189 for the extortionist's demands, while companies in other industries...

MDR Service open to cyber security technologies from other manufacturers

28 October 2022

Sophos MDR now also integrates telemetry from endpoint, firewall, cloud, identity, email and other third-party security solutions into the Sophos Adaptive Cybersecurity Ecosystem. Companies are free to choose which service they use. Sophos today announced new compatibilities between third-party security technologies and its Sophos Managed Detection and Response (MDR) service. The goal is to detect and fix attacks in different customer and operating environments even faster and more precisely. Sophos MDR, currently with more than 12.000 customers, integrates the telemetry of endpoint, firewall, cloud, identity, email and other...

Macros are out - new ways to spread malware

25 October 2022

| Short news, Sophos

Since Microsoft announced earlier this year that it would block macros from the Internet, there has been a trend in cyber crime to use archive formats or disk images to infiltrate systems with malware. The number one gateway is still email. In February of this year, Microsoft announced that it would block macros from the Internet by default. Such macros have been abused by attackers for years to deliver malware. While the security community speculated that attackers would switch to alternative formats due to Microsoft's decision, Sophos has…

Ukraine War: Were Russian Cyber Attacks Effective?

12 October 2022

A look back at six months of the Ukraine war: what strategy did the Russian cyber attacks pursue and how effective have they been so far? Cyber warfare was carried out according to 4 strategies: destruction, disinformation, hacktivism and e-espionage. A comment by Chester Wisniewski, Principal Research Scientist at Sophos. When Russia invaded Ukraine on February 24, 2022, despite many attempts at assessment, none of us knew what role cyberattacks could play in a full-scale invasion. Russia had been conducting cyberattacks on Ukraine since occupying Crimea in 2014, and it seemed inevitable that these tools would continue to play a role…

AI in the SOC - the new measure of things

7 October 2022