Sophos Limited

Gabor Szappanos

Simon Neil Reed

Fraser Howard

Guy Roberts

Dmitri Samosseiko

Peter Adam Mackenzie

Malware detections are received from a plurality of endpoints in one or more enterprise networks. A first and second set of indicators of breach may be identified from the malware detections and, where appropriate, grouped by specific customers. The pattern of progressive deployment of malware directed toward a customer can then be used as a basis for identifying generalized targeting of the customer, or extended staging for a specific attack on the customer such as a ransomware attack.

Growing community of inventors

Budapest, Hungary

Gabor Szappanos