Sophos 2023 Threat Report

Sophos 2023 Threat Report.

The Sophos 2023 threat report discusses how criminal marketplaces such as Genesis enable entry-level cybercriminals to purchase malware and malware deployment services and sell stolen credentials and other data in bulk. Access brokers are increasingly selling vulnerable software exploits and credentials to other criminal organizations.

This industrialization of ransomware has allowed ransomware “affiliates” to evolve into professional operations specializing in exploitation. These professional groups specialize in gaining (or purchasing) access for any motivated actor willing to pay or, in some cases, multiple actors with multiple motives.

In this report, you’ll learn about:

• Geopolitical Impacts and Conditions
• Attack-as-a-service Variations
• Notable Attack Tool Detections
• The Infostealer Ecosystem
• Ransomware Attack Trends for Practitioners