Resources

Initial access techniques used by Iran-based threat actors

Analysis of attacks originating from Iran-linked threat groups reveals a preference for certain techniques

Categories: Threat Research

Tags: Iran, initial access

Related resources

9 April 2026

We let OpenClaw loose on an internal network. Here’s what it found

<p>Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks</p> Categories: Threat Research Tags: OpenClaw, LLM, AI, penetration testing, Red […]

20 November 2025

WhatsApp compromise leads to Astaroth deployment

Another campaign targeting WhatsApp users in Brazil spreads like a worm and employs multiple payloads for credential theft, session hijacking, and persistence

12 January 2026

Year in Review 2025: The major headlines and moments from Sophos this year

Post Content

March Patch Tuesday visits 15 product families

A React-based phishing page with credential exfiltration via EmailJS, (Fri, Mar 13th)

Resources

Initial access techniques used by Iran-based threat actors

Related resources

We let OpenClaw loose on an internal network. Here’s what it found

WhatsApp compromise leads to Astaroth deployment

Year in Review 2025: The major headlines and moments from Sophos this year

Links

Enterprise Solutions

SMB Solutions

Contact Us

Follow Us