Active malware incident

An active malware incident is malware running on one or more devices in your environment.

These incidents can escalate quickly into a crisis and lead to complete infection of your environment.

Sophos has well-defined workflows for the main types of malware incidents. Based on the symptoms encountered on your network, you can follow the steps given in this guide and resolve the situation on your own.