Tag

Sophos

All articles tagged with #sophos

security2 hours ago•5 min saved

Teams Impersonations Fuel Chaos Ransomware Deployments Across North America

Sophos warns of STAC4749, a vishing campaign in which external Microsoft Teams calls impersonate IT staff to gain remote access, deploying backdoors and culminating in Chaos ransomware across dozens of North American organizations (Canada ~50%, US ~45%). Attackers used fake IT domains under the .top TLD, relied on Quick Assist or RemSupp, then PowerShell to install persistence and remote access tools like DWAgent/AnyDesk, with RDP used for lateral movement. Ransomware encrypts files and may accompany data theft; Chaos-as-a-service is linked to Conti offshoots. The techniques evolved to evade detection; no confirmed link to MuddyWater.

via BleepingComputer|

#chaos-ransomware #microsoft-teams #security

cybersecurity2 years ago•14 min saved

"Ransomware Exploits Critical ConnectWise ScreenConnect Flaws"

Sophos X-Ops is tracking a wave of vulnerability exploitation targeting unpatched ConnectWise ScreenConnect installations, with attackers deploying malware to servers and workstations. ConnectWise has released a security advisory highlighting two critical vulnerabilities, urging immediate patching to version 23.9.8. Cloud-hosted implementations have received updates, but self-hosted instances remain at risk until manually upgraded. Sophos observed active exploitation in the wild, including attacks involving LockBit ransomware and other malware. Recommendations include confirming deployment type, scanning for unpatched instances, and implementing security measures. Sophos also provides detection and protection rules, as well as incident response guidance for organizations to mitigate risks and investigate potential incidents.

via Sophos|

#connectwise #cybersecurity #malware

cybersecurity3 years ago•3 min saved

Beware of Fake ChatGPT Apps and AI Tools Distributing Malware

Fake ChatGPT apps are being created by developers to trick users into paying for expensive subscriptions, according to a report by cybersecurity firm Sophos. These apps, known as fleeceware, bombard users with ads until they sign up for a subscription, which can cost anywhere from $10 a month to $70 a year. Sophos has reported these apps to Apple and Google, and many have been removed from their respective app stores. To access ChatGPT without getting scammed, users can sign up for OpenAI's ChatGPT Plus for $20 a month or use Bing Chat, which has partnered with OpenAI to bring ChatGPT to its search engine.

via Tom's Guide|

#app-store #chatgpt #cybersecurity