Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user Rubin Azad

Rubin Azad

ThreatLabz analysis - Log4Shell CVE-2021-44228 Exploit Attempts
Security Insights
3 Min read

ThreatLabz analysis - Log4Shell CVE-2021-44228 Exploit Attempts

The Zscaler ThreatLabz team has been actively monitoring exploit attempts related to the Apache Log4j 0-day Remote Code Execution Vulnerability (CVE-2021-44228), also known as “Log4Shell.” In this blog we will share o...
Olympics 2020 targeted by fake streaming sites and Adware sites
Security Insights
3 Min read

Fake Streaming & Adware Target Olympics 2020

Online streaming of sporting events has increased since the Rio 2016 Olympics. The Olympics is a very popular event attracting billions of viewers across the globe -- and between cord-cutting and COVID-19, more viewers s...
Supply Chain Attack, Ransomware REvil
Security Insights
3 Min read

Coverage Advisory for Kaseya VSA Supply-Chain Ransomware Attack

Background On July 2, 2021, Kaseya, an IT Management software firm, disclosed a security incident impacting their on-prem version of Kaseya VSA software. Kaseya VSA is a cloud-based MSP platform that allows service pr...
ransomware
Ransomware
2 Min read

Coverage Advisory for DarkSide Ransomware Activity Targeting Manufacturing, Legal, Insurance, Healthcare and Energy Sectors

Background A cybersecurity advisory was released by the Federal Bureau of Investigation (FBI) related to a DarkSide ransomware infection targeting manufacturing, legal, insurance, healthcare and energy sectors. In May...
Update on JavaScript Skimmer Enhancements
Security Insights
8 Min read

Update on JavaScript Skimmer Enhancements

Card skimmer groups continue to find different ways to compromise e-commerce websites while trying to remain undetected for long periods of time. To remain undetected, they attempt to hide skimmer code and traffic in tru...
Magecart hits again, leveraging compromised sites and newly registered domains
Security Insights
4 Min read

Magecart hits again, leveraging compromised sites and newly registered domains

During alert monitoring, ThreatLabZ researchers came across multiple cases of shopping sites being compromised and injected with a skimming script. This injected script looks for the payment method and personally identif...
Scammers Use Cheap and Squatted Domains to Create Fake Sites
Security Insights
3 Min read

Scammers Use Cheap and Squatted Domains to Create Fake Sites

Last summer, a ThreatLabZ blog covered scam campaigns in which bad actors using .tk domains were showing warnings of a fake malware infection and trying to generate revenue by offering remediations. We recently notic...
Magecart campaign remains active
Security Insights
3 Min read

Magecart campaign remains active

The Zscaler ThreatLabZ team has been tracking the Magecart campaign for several months. Magecart is a notorious hacker group that has been responsible for large attacks on the e-commerce sites of well-known brands, and w...
Adobe Flash Vulnerability CVE-2015-5119 Analysis
Security Insights
3 Min read

Adobe Flash Vulnerability CVE-2015-5119 Analysis

With the leak of Hacking Team's data, the security industry came to learn about multiple new 0day vulnerabilities targeting Flash, Internet Explorer, Android, etc. As always, exploit kit authors were quick to incorpor...
Compromised Wordpress Sites Serving Multiple Malware Payloads
Security Insights
4 Min read

Compromised Wordpress Sites Serving Multiple Malware Payloads

During our daily log monitoring process, we observe many interesting threat events. One such event led to a compromised WordPress site campaign, which was found to serve multiple malware families including Upatre/Hen...
Beware Of Phishing Attacks And Other Scams During The Thanksgiving Shopping Season
Events
4 Min read

Beware Of Phishing Attacks And Other Scams During The Thanksgiving Shopping Season

Thanksgiving Day is one of the major holidays celebrated in the United States on the fourth Thursday in November. The following Friday, referred to as Black Friday, marks the start of the Christmas holiday shopping sea...
Nuclear Exploit Kit And Flash CVE-2014-0515
Security Insights
3 Min read

Nuclear Exploit Kit And Flash CVE-2014-0515

For this blog, we'd like to walk you through a recent attack involving Nuclear Exploit Kit (EK) that we analyzed. It was found leveraging CVE-2014-0515, a buffer overflow in Adobe Flash Player discovered in April 2014. ...
Beware Of Skype Adware
Security Insights
2 Min read

Beware Of Skype Adware

During our daily log analysis, we recently encountered a sample purporting to power up Skype with different emoticons. The binary, when installed, integrated itself with Skype and sent the following message contacts wi...
Analysis Of ATN Live TV IOS App Using ZAP
Security Insights
2 Min read

Analysis Of ATN Live TV IOS App Using ZAP

“As the Mobile Industry is moving so fast, so too do security and Privacy issues” There has been rapid growth in the prevalence of mobile devices in last few years. Every day a new device is being launched and ...

Related Articles

Explore More Topics