Interlock ransomware incident that shows how unprotected endpoints can give attackers enough time to steal credentials, establish persistence, and reach a domain controller before defenders intervene. During a March 2026 response engagement, Sophos Emergency Incident Response investigators found the group abusing legitimate forensic utilities, including Volatility3 and WinPmem, to acquire memory and extract credential material […]
The post Sophos Warns Unprotected Endpoints Let Interlock Credential Theft Go Undetected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.