Company > Blog News and views from the leading voice in secure digital transformation Menu Home Product Insights Security Research Company News Zscaler Life More From This Author Rubin Azad Insights and Research May 22, 2020 8 Min readUpdate on JavaScript Skimmer Enhancements Card skimmer groups continue to find different ways to compromise e-commerce websites while trying to remain undetected for long periods of time. To remain undetected, they attempt to hide skimmer code and traffic in tru... Insights and Research September 30, 2019 4 Min readMagecart hits again, leveraging compromised sites and newly registered domains During alert monitoring, ThreatLabZ researchers came across multiple cases of shopping sites being compromised and injected with a skimming script. This injected script looks for the payment method and personally identif... Insights and Research March 06, 2019 3 Min readScammers Use Cheap and Squatted Domains to Create Fake Sites Last summer, a ThreatLabZ blog covered scam campaigns in which bad actors using .tk domains were showing warnings of a fake malware infection and trying to generate revenue by offering remediations. We recently notic... Insights and Research September 28, 2018 3 Min readMagecart campaign remains active The Zscaler ThreatLabZ team has been tracking the Magecart campaign for several months. Magecart is a notorious hacker group that has been responsible for large attacks on the e-commerce sites of well-known brands, and w... Insights and Research July 13, 2015 3 Min readAdobe Flash Vulnerability CVE-2015-5119 Analysis With the leak of Hacking Team's data, the security industry came to learn about multiple new 0day vulnerabilities targeting Flash, Internet Explorer, Android, etc. As always, exploit kit authors were quick to incorpor... Insights and Research December 21, 2014 4 Min readCompromised Wordpress Sites Serving Multiple Malware Payloads During our daily log monitoring process, we observe many interesting threat events. One such event led to a compromised WordPress site campaign, which was found to serve multiple malware families including Upatre/Hen... Events November 25, 2014 4 Min readBeware Of Phishing Attacks And Other Scams During The Thanksgiving Shopping Season Thanksgiving Day is one of the major holidays celebrated in the United States on the fourth Thursday in November. The following Friday, referred to as Black Friday, marks the start of the Christmas holiday shopping sea... Insights and Research September 05, 2014 3 Min readNuclear Exploit Kit And Flash CVE-2014-0515 For this blog, we'd like to walk you through a recent attack involving Nuclear Exploit Kit (EK) that we analyzed. It was found leveraging CVE-2014-0515, a buffer overflow in Adobe Flash Player discovered in April 2014. ... Insights and Research June 24, 2014 2 Min readBeware Of Skype Adware During our daily log analysis, we recently encountered a sample purporting to power up Skype with different emoticons. The binary, when installed, integrated itself with Skype and sent the following message contacts wi... Insights and Research March 25, 2014 3 Min readWalkthrough Of A Recent Zbot Infection And Associated CnC Server During routine ThreatLabZ log analysis, we encountered the following malicious Zbot executable connecting back to it's CnC and exfiltrating data via POST requests. MD5: 0b43d6a65f67ef48f4da3a1cc09335a1 Siz... Insights and Research December 22, 2013 2 Min readAnalysis Of ATN Live TV IOS App Using ZAP “As the Mobile Industry is moving so fast, so too do security and Privacy issues” There has been rapid growth in the prevalence of mobile devices in last few years. Every day a new device is being launched and ...Related Articles Insights and Research 11 Min read Android apps targeting JIO users in India Events 3 Min read Full Cloud Ahead: A Journey to Zenith Live 2021 Insights and Research 17 Min read Ares Malware: The Grandson of the Kronos Banking Trojan Insights and Research 18 Min read Low-volume multi-stage attack leveraging AzureEdge and Shopify CDNs Insights and Research 4 Min read Disrupt the Microsoft Exchange Attacks with Zscaler Zero Trust Architecture Insights and Research 6 Min read Microsoft-Themed Phishing Attack Targets Executives Using Fake Google reCAPTCHA Technique Insights and Research 3 Min read Coverage Advisory for Exploits Related to Microsoft Exchange Servers Insights and Research 10 Min read Return of the MINEBRIDGE RAT With New TTPs and Social Engineering Lures Insights and Research 10 Min read Discord CDN: A Popular Choice for Hosting Malicious Payloads Explore More Topics Customer Stories Culture Zscaler Cloud Platform Insights and Research Work from Anywhere CIO Insights Events
