Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user emiles@zscaler.com

Ed Miles

CNACOM - Open Source Exploitation via Strategic Web Compromise
Insights and Research
4 Min read

CNACOM - Open Source Exploitation via Strategic Web Compromise

Introduction Since a full proof of concept for CVE-2016-0189 vulnerability was published on GitHub, Zscaler ThreatLabZ has been closely tracking its proliferation. The first copying of the exploit code we spotted was ...
A quick look at recent malvertising exploit chains
Insights and Research
4 Min read

A quick look at recent malvertising exploit chains

Introduction Zscaler ThreatLabZ, during our daily exploit kit (EK) tracking, have been seeing some changes in both RIG and Sundown EKs. We recently encountered a malvertising chain serving both EKs on subsequent visit...
Sundown Chronicles - Observations of an Exploit Kit's Evolution
Insights and Research
7 Min read

Sundown Chronicles - Observations of an Exploit Kit's Evolution

Since the apparent deaths of the Angler and Nuclear exploit kits, we have seen elevated activity from other groups. While RIG and Neutrino have been the primary actors in the void left by Angler and Nuclear, Sundown has ...
Tax Season Scams
Insights and Research
4 Min read

Tax Season Scams

Introduction Tax Season is once again upon those of us who don’t have a tax shelter company in Panama. This year, the IRS warned of a 400% increase in phishing attempts and tax related e-mail scams. While phishing can...
A Case Of Keitaro (featuring RIG And Nuclear)
Insights and Research
8 Min read

A Case Of Keitaro (featuring RIG And Nuclear)

Introduction Zscaler ThreatLabZ closely monitors exploit kit activity and we have seen some interesting trends in RIG Exploit Kit behavior recently, including a significant spike in cases observed in the wild. We spec...
There Goes The Neighborhood - Bad Actors On GMHOST Alexander Mulgin Serginovic
Insights and Research
7 Min read

There Goes The Neighborhood - Bad Actors On GMHOST Alexander Mulgin Serginovic

Introduction Whether they encourage it or not, some network operators become known and favored by criminals such as those that operate exploit kit (EK) and malware infrastructure. After following up the Sundown EK rec...
An Update On Nuclear (Reverse) Engineering
Insights and Research
3 Min read

An Update On Nuclear (Reverse) Engineering

Introduction Although Angler continues to be the leading exploit kit, Nuclear is a significant threat to web surfers and seems to have been very active lately. ThreatLabZ recently encountered a Nuclear campaign origi...
Anatomy of a Scamware Network—MultiPlug
Insights and Research
3 Min read

Anatomy of a Scamware Network—MultiPlug

While examining our cloud sandbox data recently, we uncovered a large MultiPlug network that caught our attention due to its use pattern of code signing certificates and the breadth of its hosting infrastructure. ...
March Madness Ads, Scams, And Malware
Insights and Research
3 Min read

March Madness Ads, Scams, And Malware

Introduction March Madness is officially upon us, with the last games of the round of 64 taking place today. As is usual with events that have such a level of interest, bad actors across the internet will be try...

Explore More Topics