Mark Loman

Computer Doctor | We stop ransomware, exploits, hacker tricks on-device | Sophos Endpoint & HitmanPro dev | Tweets are my own

[Mark Loman @markloman]

LockFile ransomware attempts to evade protection with 'intermittent encryption' and making Windows write the encrypted documents for them, throwing off statistical content analysis and runtime behavior detection. Get the lowdown in our dissection 101: https://t.co/utPdAeRnZx

[Sophos @Sophos]

For five years, Sophos engaged in defensive and counter-offensive operations against China-based, state-sponsored threat actors.

Now @DarknetDiaries, the most popular cybersecurity podcast in the world, has spent 90 minutes telling the full story.

🎧 https://t.co/XfhngKx3C7

[Mark Loman @markloman]

Ransomware: AI changes the writer. It doesn't change the math.
Why most endpoint protection still treats ransomware as just another piece of malware, and what changes when you watch the data instead of the attacker. https://t.co/ZkgOljMnqk

[Mark Loman @markloman]

AI finds bugs faster, but hasn't changed how they're exploited. Sophos targets the primitives, not the provenance. AI-written or manual: they hit the same architectural wall. We build the friction where defenders win, on every process, by default: https://t.co/5tmPejZd8t

[Mark Loman @markloman]

Waar zit je aanvaller écht? Mijn onderzoek met de CTU toont hoe cloud VM's "rogue insiders" worden:

1️⃣ Geo-blocking omzeilen 🌍 2️⃣ Via RDP/VPN je infra in; de VM wordt deel van jouw netwerk 3️⃣ Remote encryptie via SMB (geen lokale signalen!)

Details: https://t.co/2BVmovObCO

[Ronny @RonnyTNL]

It started with #WantToCry and machine names WIN-J9D866ESIJ2 & WIN-LIVFRVQFMKO turned out to be a rabbit-hole of baddies

https://t.co/a7EvJrPiCJ

[Mark Loman @markloman]

@stoked_security Hebbes, ik ga het intern opvragen!

[Mark Loman @markloman]

.@StealaBrainrotR Security concern: Unknown player appeared in our private server during Gingerbread Town Event and last night during Christmas Eve admin event, a paid Festive 67 was removed from my son's base while allowed players were asleep. Looks like an exploit. Please act.

[Mark Loman @markloman]

A Chinese APT leveraged Claude AI to run an end-to-end intrusion — recon, exploit generation, lateral movement — all executed via Anthropic’s own systems.
Defenders are officially in a new era. https://t.co/SrHOFCpq0G

[Mark Loman @markloman]

@AbbottEddi5270 Mmmr

[Mark Loman @markloman]

@UID_ Autisme werd voor het eerst in 1943 (Kanner) en 1944 (Asperger) beschreven als apart syndroom. Tylenol kwam in 1955 op de markt.

[Mark Loman @markloman]

@scampbird Yes yes this tyre!

[Sophos X-Ops @SophosXOps]

Threat actors regularly look for ways to disable security products. Tamper protection – a mechanism designed to stop threat actors from interfering with security products – is therefore a critical part of any security suite.

[Mark Loman @markloman]

@fmeeus1 Idd, zowel Codex Sinaiticus als Vaticanus eindigen Marcus 16 bij vers 8. De verzen 9–20 zijn een latere toevoeging (2e eeuw). De NBV21 meldt dit in een voetnoot. Soemerische opstandingsmythen zoals die van Inanna (later Ishtar) zijn >1000 jaar ouder dan het christendom.

[Sophos X-Ops @SophosXOps]

At the end of 2023, Sophos X-Ops noted a 62% year-on-year increase in ‘remote encryption’ attacks – where ransomware attackers compromise an unmanaged or under-protected endpoint, and leverage that access to encrypt data on managed, domain-joined machines.

[Ole Lehmann @itsolelehmann]

Everyone says Europe can't compete with America in tech.

But 48 hours ago, Mistral's 'Le Chat' just proved them wrong:

• 13x faster than ChatGPT
• 100% open-source
• Completely free (vs $20/month)

The European AI breakthrough Silicon Valley didn't see coming 🧵:

[Mark Loman @markloman]

@tonjung57 Diesels met AdBlue stoten minder CO₂ en NOx uit dan benzinemotoren. Ze hebben bij lange achtervolgingen efficiënter verbruik, hoger koppel voor snelle acceleraties op snelheid, én een grotere actieradius dan benzineauto’s én EV’s. Ideaal voor snelweginzet.

[Lisa Loman @LisaL198]

Ik bestelde een McCrispy, niet een McPlastic. Is dit wat jullie bedoelen met transparantie over voeding, want dit is zeker ‘kraakhelder’ zoals jullie het zelf noemen, @McDonaldsNL 🤷‍♀️🍔

[Sophos @Sophos]

Chester Wisniewski, Director and Global Field CTO, shares insights from a five-year operation countering state-sponsored adversaries.

Listen to our latest Inside Pacific Rim entry as Chester and Joe Levy, CEO, discuss key findings in this six-part series: https://t.co/hHpOe0jX4F

[Mark Loman @markloman]

Inside a Firewall Vendor's 5-Year War With Chinese Hackers Hijacking Its Devices: Sophos went so far as to plant surveillance “implants” on its own devices to catch the hackers at work, revealing a glimpse into China's R&D pipeline of intrusion techniques: https://t.co/mkghTGZQDU