Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user razad@zscaler.com

Rubin Azad

ThreatLabz analysis - Log4Shell CVE-2021-44228 Exploit Attempts
Insights and Research
6 Min read

ThreatLabz analysis - Log4Shell CVE-2021-44228 Exploit Attempts

The Zscaler ThreatLabz team has been actively monitoring exploit attempts related to the Apache Log4j 0-day Remote Code Execution Vulnerability (CVE-2021-44228), also known as “Log4Shell.” In this blog we will share o...
Olympics 2020 targeted by fake streaming sites and Adware sites
Insights and Research
3 Min read

Fake Streaming & Adware Target Olympics 2020

Online streaming of sporting events has increased since the Rio 2016 Olympics. The Olympics is a very popular event attracting billions of viewers across the globe -- and between cord-cutting and COVID-19, more viewers s...
Supply Chain Attack, Ransomware REvil
Insights and Research
3 Min read

Coverage Advisory for Kaseya VSA Supply-Chain Ransomware Attack

Background On July 2, 2021, Kaseya, an IT Management software firm, disclosed a security incident impacting their on-prem version of Kaseya VSA software. Kaseya VSA is a cloud-based MSP platform that allows service pr...
ransomware
Ransomware
2 Min read

Coverage Advisory for DarkSide Ransomware Activity Targeting Manufacturing, Legal, Insurance, Healthcare and Energy Sectors

Background A cybersecurity advisory was released by the Federal Bureau of Investigation (FBI) related to a DarkSide ransomware infection targeting manufacturing, legal, insurance, healthcare and energy sectors. In May...
Update on JavaScript Skimmer Enhancements
Insights and Research
8 Min read

Update on JavaScript Skimmer Enhancements

Card skimmer groups continue to find different ways to compromise e-commerce websites while trying to remain undetected for long periods of time. To remain undetected, they attempt to hide skimmer code and traffic in tru...
Magecart hits again, leveraging compromised sites and newly registered domains
Insights and Research
4 Min read

Magecart hits again, leveraging compromised sites and newly registered domains

During alert monitoring, ThreatLabZ researchers came across multiple cases of shopping sites being compromised and injected with a skimming script. This injected script looks for the payment method and personally identif...
Scammers Use Cheap and Squatted Domains to Create Fake Sites
Insights and Research
3 Min read

Scammers Use Cheap and Squatted Domains to Create Fake Sites

Last summer, a ThreatLabZ blog covered scam campaigns in which bad actors using .tk domains were showing warnings of a fake malware infection and trying to generate revenue by offering remediations. We recently notic...
Magecart campaign remains active
Insights and Research
3 Min read

Magecart campaign remains active

The Zscaler ThreatLabZ team has been tracking the Magecart campaign for several months. Magecart is a notorious hacker group that has been responsible for large attacks on the e-commerce sites of well-known brands, and w...
Adobe Flash Vulnerability CVE-2015-5119 Analysis
Insights and Research
3 Min read

Adobe Flash Vulnerability CVE-2015-5119 Analysis

With the leak of Hacking Team's data, the security industry came to learn about multiple new 0day vulnerabilities targeting Flash, Internet Explorer, Android, etc. As always, exploit kit authors were quick to incorpor...
Compromised Wordpress Sites Serving Multiple Malware Payloads
Insights and Research
4 Min read

Compromised Wordpress Sites Serving Multiple Malware Payloads

During our daily log monitoring process, we observe many interesting threat events. One such event led to a compromised WordPress site campaign, which was found to serve multiple malware families including Upatre/Hen...
Beware Of Phishing Attacks And Other Scams During The Thanksgiving Shopping Season
Events
4 Min read

Beware Of Phishing Attacks And Other Scams During The Thanksgiving Shopping Season

Thanksgiving Day is one of the major holidays celebrated in the United States on the fourth Thursday in November. The following Friday, referred to as Black Friday, marks the start of the Christmas holiday shopping sea...
Nuclear Exploit Kit And Flash CVE-2014-0515
Insights and Research
3 Min read

Nuclear Exploit Kit And Flash CVE-2014-0515

For this blog, we'd like to walk you through a recent attack involving Nuclear Exploit Kit (EK) that we analyzed. It was found leveraging CVE-2014-0515, a buffer overflow in Adobe Flash Player discovered in April 2014. ...
Beware Of Skype Adware
Insights and Research
2 Min read

Beware Of Skype Adware

During our daily log analysis, we recently encountered a sample purporting to power up Skype with different emoticons. The binary, when installed, integrated itself with Skype and sent the following message contacts wi...
Walkthrough Of A Recent Zbot Infection And Associated CnC Server
Insights and Research
3 Min read

Walkthrough Of A Recent Zbot Infection And Associated CnC Server

During routine ThreatLabZ log analysis, we encountered the following malicious Zbot executable connecting back to it's CnC and exfiltrating data via POST requests. MD5: 0b43d6a65f67ef48f4da3a1cc09335a1 Siz...
Analysis Of ATN Live TV IOS App Using ZAP
Insights and Research
2 Min read

Analysis Of ATN Live TV IOS App Using ZAP

“As the Mobile Industry is moving so fast, so too do security and Privacy issues” There has been rapid growth in the prevalence of mobile devices in last few years. Every day a new device is being launched and ...

Explore More Topics