Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user Gayathri Anbalagan

Gayathri Anbalagan

Thailand pass delivers AsyncRAT campaign
Security Insights
8 Min read

Targeted attack on Thailand Pass customers delivers AsyncRAT

The Zscaler ThreatLabz research team has recently discovered a malware campaign targeting users applying for Thailand travel passes. The end payload of many of these attacks is AsyncRAT, a Remote Access Trojan that can b...
cyberattack
Security Insights
6 Min read

Microsoft-Themed Phishing Attack Targets Executives Using Fake Google reCAPTCHA Technique

ThreatLabZ, the Zscaler threat research team, recently observed a new series of Microsoft-themed phishing attacks aimed at senior-level employees at multiple organizations. The Zscaler cloud has blocked over 2,500 of the...
Cybercriminals Targeting Multiple Vulnerabilities in WordPress Plugins
Security Insights
5 Min read

Cybercriminals Targeting Multiple Vulnerabilities in WordPress Plugins

WordPress is, by far, the most popular open source software used to build and host websites. So much so that, according to a July 2020 survey, around 455,000,000 websites are using WordPress. Overall, WordPress sites mak...
New Campaign Abusing StackBlitz Tool to Host Phishing Pages
Security Insights
6 Min read

New Campaign Abusing StackBlitz Tool to Host Phishing Pages

There are numerous tools available to help individuals create new, exciting webpages. And, there seem to be just as many hackers looking to exploit these tools for their own gain. Recently, the Zscaler ThreatLabz Team...
NetSupport RAT installed via fake update notices
Security Insights
5 Min read

NetSupport RAT installed via fake update notices

Recently, the Zscaler ThreatLabZ team came across two campaigns designed to trick users into downloading a Remote Access Trojan (RAT) via a fake Flash Player update and a font update. These campaigns are designed to inje...
Abusing Microsoft’s Azure domains to host phishing attacks
Security Insights
6 Min read

Abusing Microsoft’s Azure domains to host phishing attacks

Recently, the Zscaler ThreatLabZ team came across various phishing attacks leveraging Microsoft Azure custom domains. These sites are signed with a Microsoft SSL certificate, so they are unlikely to raise suspicion about...

Related Articles

Explore More Topics