Claim
The wider attack infrastructure also used sophosproductupdate.com as an update domain.
“there was sophosfirewallupdate.com and sophosproductupdate.com”
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:59:46.082354+00:00
claim:ep174:f77ada3dc9ea