Category: Rapid Response

Providing Solutions

Rapid Response: The Squirrelwaffle Incident Guide

Squirrelwaffle is a malicious dropper or loader used to deliver other malware onto target systems. This guide shows Security Operations Centers (SOCs) and Incident Response Teams how to detect and respond to the presence of Squirrelwaffle on the network

Windows services lay the groundwork for a Midas ransomware attack

Attackers took two months to craft and install PowerShell scripts as services before deploying the ransomware

Avos Locker remotely accesses boxes, even running in Safe Mode

Infections involving this relatively new ransomware-as-a-service spiked in November and December

Three reasons to add Sophos to your incident response plan

Sophos Rapid Response provides lightning-fast expert cyber incident response.