I haven't found any information from Sophos Home or other Sophos resources so I dropped into chat with a Sophos rep to ask if Sophos Home or Sophos enterprise is aware of this new attack that's been happening for a few months.
Fracturiser
I first read about it here:
Which references an official notice here: https://prismlauncher.org/news/cf-compromised-alert/ which also links to cleanup scripts here: https://prismlauncher.org/news/cf-compromised-alert/
This thread was automatically locked due to age.