You do surprise me.exe: An unexpected executable in Hola Browser

Sophos published multiple Threat Research updates describing active supply-chain and malware incidents: an unexpected executable in Hola Browser that delivered crypto-mining components, a malicious VS Code extension that led to cloning and sale of private GitHub repositories, WantToCry ransomware performing SMB brute-force and remote file encryption, and the AMOS (Atomic macOS Stealer) campaign harvesting macOS data at scale. The collection also covers post-incident analysis of the Canvas data compromise (ShinyHunters/GOLD CRYSTAL), AI-assisted evasion research targeting EDRs, and product/def­