Sophos VPN is a technology platform tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed January 7, 2026; most recent activity January 8, 2026.
Sophos VPN is a remote-access VPN platform used by organizations to provide secure remote connectivity. Recent reports describe BlueDelta hackers conducting credential-stealing campaigns against users of Microsoft OWA, Google accounts, and Sophos VPN, underscoring VPNs and identity services as high-value targets in cybersecurity.
The BlueDelta hacking group, linked to Russian military intelligence, has intensified its credential-stealing efforts throughout 2025. Users of Microsoft Outlook Web Access, Google services, and Sophos VPN have been…
Between February and September 2025, BlueDelta, a Russian state-sponsored group, conducted multiple credential-harvesting campaigns. These operations targeted users of UKR.NET, a popular Ukrainian webmail and news…