InfoSecBulletin Cybersecurity for mankind
A new ransomware-as-a-service called SophosEncrypt is impersonating the well-known cybersecurity vendor, Sophos. The threat actors have cleverly adopted the company’s name to carry out their operation.
Yesterday, the ransomware was discovered by Malware Hunter Team. At first, Sophos believed it was a component of a red team exercise. The encryptor was not created by the Sophos X-Ops team, as confirmed by their recent tweet. They are currently carrying out an investigation into its release.
16,000+ Fortinet devices compromised with symlink backdoor, Mostly in Asia
Patch now! Critical Erlang/OTP SSH Vuln Allows UCE
CISA warns of increasing risk tied to Oracle legacy Cloud leak
CVE-2025-20236
Cisco Patches Unauthenticated RCE Flaw in Webex App
Apple released emergency security updates for 2 zero-day vulns
Oracle Released Patched for 378 flaws for April 2025
CVE-2025-24054
Hackers Exploiting NTLM Spoofing Windows Vuln the in Wild
Bengaluru firm got ransomware attack, Hacker demanded $70,000
MITRE warns: U.S. Govt. Funding for MITRE’s CVE Ends Today
PwC exits more than a dozen countries in push to avoid scandals: FT reports
ALSO READ:
“We found this on VT earlier and have been investigating. Our preliminary findings shows Sophos InterceptX protects against these ransomware samples,” tweeted Sophos.
ID Ransomware has identified a submission from an infected victim as evidence that the Ransomware-as-a-Service operation is happening actively.
Although the specifics of the RaaS operation and its promotion remain largely unknown, Malware Hunter Team stumbled upon a sample of the encryptor, providing us with a valuable glimpse into its inner workings.
