Messageboards Are All They Need
Sophos, Tuesday, September 15th, 2026
Sophos research examines how threat actors coordinate via messageboards rather than sophisticated infrastructure.
Sophos publishes research on how criminal actors rely on ordinary messageboards for coordination, tooling and trade.
The post shows that much of the ecosystem functions without the bespoke infrastructure often assumed by defenders.
It documents the patterns of activity observed and what they reveal about actor capability and organization. Sophos draws out the detection and intelligence implications of adversaries hiding in plainly accessible forums.