InfoSecBulletin Cybersecurity for mankind
A new ransomware-as-a-service called SophosEncrypt is impersonating the well-known cybersecurity vendor, Sophos. The threat actors have cleverly adopted the company’s name to carry out their operation.
Yesterday, the ransomware was discovered by Malware Hunter Team. At first, Sophos believed it was a component of a red team exercise. The encryptor was not created by the Sophos X-Ops team, as confirmed by their recent tweet. They are currently carrying out an investigation into its release.
Hacker reportedly leak Indonesia Gov.t 82 GB data
BCSI officially announce National Vulnerability Disclosure Program (NVDP)
CVE-2024-9474
Researcher unveil sophisticated backdoor in Palo Alto Networks firewalls
New G-Door Vul Allow Hackers Bypass Microsoft 365 Security With Google Docs
CVE-2024-53961
Adobe alerts of critical ColdFusion bug with PoC exploit available
Splunk targets Bangladeshi market: Investing in local talent
Critical PHP Zero-Day Vulnerability found in Craft CMS To Gain RCE
For US$2.6bn, Mastercard acquires threat intelligence firm Recorded Future
Eight New ICS Advisories released by CISA
Authority Denies
Hacker claim ransomware attack on Indonesia’s state bank BRI
ALSO READ:
“We found this on VT earlier and have been investigating. Our preliminary findings shows Sophos InterceptX protects against these ransomware samples,” tweeted Sophos.
ID Ransomware has identified a submission from an infected victim as evidence that the Ransomware-as-a-Service operation is happening actively.
Although the specifics of the RaaS operation and its promotion remain largely unknown, Malware Hunter Team stumbled upon a sample of the encryptor, providing us with a valuable glimpse into its inner workings.
