Sean Gallagher

Sean Gallagher

Sean Gallagher is Principal Threat Researcher, Sophos X-Ops. Prior to joining Sophos, he was an information security and technology journalist for over 30 years, including 10 as information security and national security editor for Ars Technica.

Content by Sean Gallagher

Using AI to identify cybercrime masterminds

AI Research

Threat Research

AI

cybercrime

Dark Web

featured

threat activity cluster

threat actors

Using AI to identify cybercrime masterminds

June 30, 2025

Small,White,Cctv,Cameras,On,A,Pole,Against,The,Background

Security Operations

Threat Research

Annual Threat Report

Attack Tools

Dual-use tools

malware trends 2024

Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software

April 16, 2025

Small,White,Cctv,Cameras,On,A,Pole,Against,The,Background

Security Operations

Threat Research

Annual Threat Report

featured

midsize businesses

small businesses

The Sophos Annual Threat Report: Cybercrime on Main Street 2025

April 16, 2025

Spearfisherman Submerged Up To His Head

Security Operations

Threat Research

adversary in the middle

featured

MFA

MFA phishing

qilin

RMM

ScreenConnect

Sophos X-Ops

supply chain compromise

Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream

April 1, 2025

Email,Alert,And,Message,Sending,/,Receiving,Concept,:,Envelope

Security Operations

Threat Research

Black Basta

featured

Fin7

Java malware

legitimate service abuse

Microsoft Office 365

python malware

Quick Assist

remote machine management

Sophos X-Ops

STAC5143

stac5777

Teams

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”

January 21, 2025

A,Wooden,Acoustic,Guitar,At,Night.,With,Spotlight,For,Your

Security Operations

Threat Research

CloudFlare

featured

FlowerStorm

legitimate service abuse

Phishing

phishing-as-a-service

Rockstar

Rockstar2FA

Sophos MDR

Sophos X-Ops

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

December 19, 2024

shutterstock_asset-generation-6dc4f763-f8a7-4dff-a56b-92736d8c8d6c-1_edited

AI Research

deepspeed

featured

LLM

LLM tuning

DeepSpeed: a tuning tool for large language models

December 13, 2024

Flat,Line,Design,Website,Banner,Of,Learning,Process,,Brain,Process,

AI Research

AI Trojans

featured

LLM

Sophos AI to present on how to defang malicious AI models at Black Hat Europe

December 10, 2024

The,Muddy,Water,Of,The,Jordan,River,At,The,Border

Security Operations

Threat Research

Atera

featured

legitimate service abuse

MDR

MuddyWater

Phishing

RMM

Sophos X-Ops

STAC 1171

TA450

Sophos MDR blocks and tracks activity from probable Iranian state actor “MuddyWater”

November 20, 2024