"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Your Sophos console displays an 'Outbreak' message in the computer list view or the computer details view (in the same location as named malware is listed). This article describes what this means and what to do about it.
Enterprise ConsoleSophos Enterprise Manager
A special alert which uses the term 'Outbreak', is displayed in the console when the Quarantine Manager on any given computer has 200 items listed in it. Typically:
When the Quarantine Manager has 200 items in it, it sends the 'Outbreak' message to the console. Once this message has been sent, Quarantine Manager will not send any more messages until the number of items it contains is reduced to less than 200 (by whatever means).
It is possible to have one or many reports of an outbreak in the console depending on whether the message comes from only one endpoint computer or from many endpoints. Every endpoint computer on which the Quarantine Manager has 200 items in it, will send an 'Outbreak' message.
In order to most effectively clean up your system and identify the source of infection, use the Sophos Malware Remediation Toolkit (SMaRT).
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.