Asnarok INVOLVES sophosfirewallupdate.com
The attack redirected firewalls to sophosfirewallupdate.com for update retrieval.
Explicit Confidence 99% · Craig Jones EP 174 Details
“it was a wget to a domain called sophosfirewallupdate.com”
Website
website:sophosfirewallupdate_com
Domain used by the attackers to make Sophos Firewalls retrieve updates from attacker-controlled infrastructure.
Domain used by the attackers to make Sophos Firewalls retrieve updates from attacker-controlled infrastructure.
“a domain called sophosfirewallupdate.com”
Asnarok INVOLVES sophosfirewallupdate.com
The attack redirected firewalls to sophosfirewallupdate.com for update retrieval.
Explicit Confidence 99% · Craig Jones EP 174 Details
“it was a wget to a domain called sophosfirewallupdate.com”