Product
Sophos CryptoGuard
- First Reported
- May 20, 2026
- Latest Reported
- May 20, 2026
Reported Context (1)
- A Sophos CryptoGuard detection from January 6, 2026 showed that an IP address associated with the WIN-J9D866ESIJ2 host wrote a WantToCry ransom note to multiple directories (see Figure 3). Sophos Details WantToCry Ransomware’s Remote SMB Encryption Attacks
Malware (1)
MITRE ATT&CK (4)
Vendors (1)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.