Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user Nirmal Singh

Nirmal Singh

The 2022 ThreatLabz State of Ransomware Report
Ransomware
6 Min read

The 2022 ThreatLabz State of Ransomware Report

Ransomware attacks increased by yet another 80% between February 2021 and March 2022, based on an analysis of ransomware payloads seen across the Zscaler cloud. Double-extortion attacks, which include data exfiltration i...
ransomware-attack-notification
Ransomware
2 Min read

ThreatLabZ Ransomware Review: The Advent of Double Extortion

The recent ransomware attack on the Colonial Pipeline abruptly halted operations on the largest refined products pipeline in the United States, impacting fuel availability across the eastern half of the country. In this ...
Targeted Attack Leverages India-China Border Dispute to Lure Victims
Security Insights
9 Min read

Targeted Attack Leverages India-China Border Dispute to Lure Victims

Malicious threat actors are always ready to take advantage of current affairs to maximize the success rate of their attacks. The Zscaler ThreatLabZ team recently came across one such attack trying to leverage the current...
Multistaged Downloader Leverages Google Drive to Download Advanced Malware
Security Insights
5 Min read

Multistaged Downloader Leverages Google Drive to Download Advanced Malware

Ever use Google Drive? Of course you have—you and approximately 1 billion other people. And it is estimated that those 1 billion users have loaded more than 2 trillion files on Google Drive. So, it’s a pretty big deal wh...
Microsoft vulnerability: Source code published for three zero-day vulnerabilities in Windows
Security Insights
1 Min read

Microsoft vulnerability: Source code published for three zero-day vulnerabilities in Windows

Background A security researcher (with the pseudonym SandboxEscaper) has discovered three zero-day vulnerabilities in Microsoft Windows. Their POC and source code have been released on GitHub. Two of these are local p...
Mjag dropper: Using decoy documents to drop RATs
Security Insights
4 Min read

Mjag dropper: Using decoy documents to drop RATs

Mjag dropper Mjag dropper is compiled in the Microsoft .NET framework, and its original binary is obfuscated using SmartAssembly. The installation path and other details are stored in encrypted form using AES encrypti...
DarkCloud Bootkit
Security Insights
6 Min read

DarkCloud Bootkit

In an earlier blog about crypto-malware, we described different techniques used by cybercriminals, such as cryptomining and wallet stealing. In this blog, we will provide a technical analysis of yet another type of crypt...
Malicious RTF document leading to NetwiredRC and Quasar RAT
Security Insights
4 Min read

Malicious RTF document leading to NetwiredRC and Quasar RAT

Malware authors use a variety of clever methods to lure users into executing malicious documents. But the ThreatLabZ team recently observed a social engineering campaign with a unique approach. In these cases, malicious ...
Malicious Office Files Dropping Kasidet And Dridex
Security Insights
5 Min read

Malicious Office Files Dropping Kasidet And Dridex

Introduction We have covered Dridex Banking Trojan being delivered via various campaigns involving Office documents with malicious VBA macros in the past. However, over the past two weeks we are seeing these malici...
IRC Botnets Alive, Effective & Evolving
Security Insights
16 Min read

IRC Botnets Alive, Effective & Evolving

Introduction An IRC Botnet is a collection of machines infected with malware that can be controlled remotely via an IRC channel. It usually involves a Botnet operator controlling the IRC bots through a previously co...

Related Articles

Explore More Topics