Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user Avinash Kumar

Avinash Kumar

Sr. Security Researcher II
SideWinder APT attack
Insights and Research
17 Min read

WarHawk: the New Backdoor in the Arsenal of the SideWinder APT Group

Recently, Zscaler ThreatLabz discovered a new malware being used by the SideWinder APT threat group in campaigns targeting Pakistan: a backdoor we’ve called “WarHawk.” SideWinder APT, aka Rattlesnake or T-APT4, is a susp...
Agent Tesla
Insights and Research
15 Min read

Agent Tesla RAT Delivered by Quantum Builder With New TTPs

Zscaler ThreatLabz has observed a campaign that delivers Agent Tesla, a .NET based keylogger and remote access trojan (RAT) active since 2014, using a builder named “Quantum Builder” sold on the dark web. This campaign f...
Lyceum .NET DNS Backdoor
Insights and Research
9 Min read

Lyceum .NET DNS Backdoor

Active since 2017, Lyceum group is a state-sponsored Iranian APT group that is known for targeting Middle Eastern organizations in the energy and telecommunication sectors and mostly relying on .NET based malwares. Z...
Stealer Targeting Social Media Platform Users
Insights and Research
12 Min read

FFDroider Stealer Targeting Social Media Platform Users

Introduction Credential stealing malware is commonly observed in the landscape of cyber attacks today. Zscaler ThreatLabz team has discovered many new types of stealer malwares across different attack campaigns. Steal...
Return of Emotet: Malware Analysis
Insights and Research
9 Min read

Return of Emotet: Malware Analysis

Key Points Emotet is a downloader malware used to download and execute additional modules and payloads. In January 2021, a law enforcement action disrupted the malware, its infrastructure, and some of its threat ...
Cyber security
Insights and Research
11 Min read

Squirrelwaffle: New Loader Delivering Cobalt Strike

Zscaler ThreatLabz has been following an emerging new malware loader known as Squirrelwaffle that is being used to deliver Cobalt Strike. In this blog, we will be analyzing the complete attack chain for this new malware ...
Spear Phishing attack
Insights and Research
7 Min read

Targeted Attack on Government Organizations Delivers Netwire RAT

The Zscaler ThreatLabz team has observed an interesting spear phishing campaign beginning July 2021 in which a threat actor is targeting a wide range of organizations in Pakistan. NetwiredRC is being used as the final pa...
Distributing malware through chat services
Insights and Research
10 Min read

Discord CDN: A Popular Choice for Hosting Malicious Payloads

Introduction Since the onset of the pandemic, the internet has become a central part of our lives. People of all ages turned online for school and work, to stream videos, to play video games, have virtual get-together...
Targeting WordPress Sites
Insights and Research
6 Min read

Malware Leveraging XML-RPC Vulnerability to Exploit WordPress Sites

We have written a number of blogs about vulnerabilities within and attacks on sites built with WordPress. And, when you consider that 34 percent of all websites in the world are built with WordPress, it’s understandable ...
Taurus: The New Stealer in Town
Insights and Research
6 Min read

Taurus: The New Stealer in Town

A sandbox is a valuable tool in the ongoing battle against cybercriminals and bad actors are continually looking for ways to avoid detection. One of the newest ones we observed, Taurus, includes techniques to evade sandb...
Multistaged Downloader Leverages Google Drive to Download Advanced Malware
Insights and Research
5 Min read

Multistaged Downloader Leverages Google Drive to Download Advanced Malware

Ever use Google Drive? Of course you have—you and approximately 1 billion other people. And it is estimated that those 1 billion users have loaded more than 2 trillion files on Google Drive. So, it’s a pretty big deal wh...
Malicious RTF document leading to NetwiredRC and Quasar RAT
Insights and Research
4 Min read

Malicious RTF document leading to NetwiredRC and Quasar RAT

Malware authors use a variety of clever methods to lure users into executing malicious documents. But the ThreatLabZ team recently observed a social engineering campaign with a unique approach. In these cases, malicious ...

Related Articles

Explore More Topics