Sophoslabs Github News Today

Booby-trapped app, apparently signed and shipped by 3CX itself after its source code repository was broken into.

Researchers from two security outfits have observed malware campaigns abusing Microsoft’s OneNote application since the software giant began blocking macros by default last year.

minute read Share this article: Threat actors targeted compromised Exchange servers to host malicious Monero cryptominer in an “unusual attack,” Sophos researchers discovered. Cryptojacking can be added to the list of threats that face any unpatched Exchange servers that remain vulnerable to the now-infamous ProxyLogon exploit, new research has found. Researchers discovered the threat actors using Exchange servers compromised using the highly publicized exploit chain—which su...

Gootloader is delivering malicious payloads through tightly targeted operations in the US, Germany and South Korea, according to Sophos.

MrbMiner is a cryptominer that targets internet-facing database servers

Press release content from Globe Newswire. The AP news staff was not involved in its creation. Sophos Identifies Source Of “MrbMiner” Attacks Targeting Database Servers Sophos Ltd.January 21, 2021 GMT OXFORD, United Kingdom, Jan. 21, 2021 (GLOBE NEWSWIRE) -- Sophos, a global leader in next-generation cybersecurity, today published a new report on MrbMiner, “ MrbMiner: Cryptojacking to bypass international sanctions,” tracking its origin and management to a small software development com...