Resources

Eeny, meeny, miny, moe? How ransomware operators choose victims

Most ransomware attacks are opportunistic, not targeted at a specific sector or region

Categories: Threat Research

Tags: Ransomware, cybercrime, state-sponsored ransomware, victimization

Related resources

23 March 2026

NICKEL ALLEY strategy: Fake it ’til you make it

Victimizing software developers via fake companies, jobs, and code repositories to steal cryptocurrency Categories: Threat Research Tags: NICKEL ALLEY, Contagious Interview, North Korea, clickfix

11 March 2026

Evil evolution: ClickFix and macOS infostealers

<p>Across three recent campaigns, Sophos X-Ops notes shifts in both lures and malware capabilities, as threat actors leveraging ClickFix techniques increasingly target macOS users with infostealers</p> Categories: Threat Research Tags: […]

7 August 2025

Sophos AI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job

Following on from our preview, here’s Ben Gelman and Sean Bergeron’s research on enhancing command line classification with benign anomalous data

The Constitutionality of Geofence Warrants

ISC Stormcast For Wednesday, January 28th, 2026 https://isc.sans.edu/podcastdetail/9784, (Wed, Jan 28th)

Resources

Eeny, meeny, miny, moe? How ransomware operators choose victims

Related resources

NICKEL ALLEY strategy: Fake it ’til you make it

Evil evolution: ClickFix and macOS infostealers

Sophos AI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job

Links

Enterprise Solutions

SMB Solutions

Contact Us

Follow Us