Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user Rohit Hegde

Rohit Hegde

Security Research
Enterprises evaluate risk in light of new phishing trends and findings from the 2023 ThreatLabz Phishing Report
Threatlabz Research
2 Min read

2023 Phishing Report Reveals 47.2% Surge in Phishing Attacks Last Year

Phishing attacks continue to be one of the most significant threats facing organizations today. As businesses increasingly rely on digital communication channels, cybercriminals exploit vulnerabilities in email, SMS, and...
3CX supply chain attack
Security Insights
4 Min read

3CX Supply Chain Attack Campaign

On March 29th 2023, CrowdStrike published a blog outlining a supply chain attack leveraging the 3CXDesktopApp - a softphone application from 3CX. The ThreatLabz Team immediately started hunting for IoCs on the Zscaler Cl...
3CX supply chain attack
Security Insights
2 Min read

Coverage Advisory for 3CX Supply Chain Attack

Update [2023-03-31 05:00 PM PST] We have published a blog detailing our analysis on the 3CX Supply Chain Attack. Background: On 30th March 2023, 3CX released a security alert for 3CX Electron Windows App shipped in...
Coverage advisory for CVE-2023-23397
Security Insights
2 Min read

Coverage Advisory for CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability

Background: On 14th March 2023, Microsoft released a security update guide for a critical severity vulnerability CVE-2023-23397. This vulnerability targets Microsoft Outlook and allows NTLM credentials theft which cou...
Job scams impersonate companies still hiring following tech layoffs
Security Insights
5 Min read

Job scams impersonate companies still hiring following tech layoffs

Summary In the midst of significant layoffs hitting the previously immune tech industry, scammers have mobilized and doubled down on targeting job seekers with various employment scams. Stealing personal information a...
ThreatLabz State of Encrypted Attacks 2022 Report exposes hidden threats
Stop Cyberattacks
5 Min read

Spoiler: New ThreatLabz Report Reveals Over 85% of Attacks Are Encrypted

Once upon a time, encrypted traffic was considered the safe, secure option for browsing and doing business online. Going back nine years to December 2013, the Google Transparency Report shows just 48% of worldwide web tr...
voicemail-themed phishing campaign steals Microsoft credentials
Security Insights
4 Min read

Resurgence of Voicemail-themed Phishing Attacks Targeting Key Industry Verticals in US

Summary Since May 2022, ThreatLabz has been closely monitoring the activities of a threat actor which targets users in various US-based organizations with malicious voicemail-notification-themed emails in an attempt t...
2022 ThreatLabz Phishing Report
Security Insights
6 Min read

Uncovering new techniques and phishing attack trends from the cloud

Download your free copy of the 2022 ThreatLabz Phishing Report, and check out our infographic. For decades, phishing has been a complex and time-consuming challenge for every security team. As the findings of the Thre...
CVE-2021-40444
Security Insights
2 Min read

Security Advisory: Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444)

Background On 7th September 2021, Microsoft released an advisory for CVE-2021-40444. The CVE has a CVSS score of 8.8. What is the issue? Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444) M...
Olympics 2020 targeted by fake streaming sites and Adware sites
Security Insights
3 Min read

Fake Streaming & Adware Target Olympics 2020

Online streaming of sporting events has increased since the Rio 2016 Olympics. The Olympics is a very popular event attracting billions of viewers across the globe -- and between cord-cutting and COVID-19, more viewers s...
Supply Chain Attack, Ransomware REvil
Security Insights
3 Min read

Coverage Advisory for Kaseya VSA Supply-Chain Ransomware Attack

Background On July 2, 2021, Kaseya, an IT Management software firm, disclosed a security incident impacting their on-prem version of Kaseya VSA software. Kaseya VSA is a cloud-based MSP platform that allows service pr...
Recent Magecart trends and enhancements
Security Insights
5 Min read

Magecart Attacks in 2021

Skimmer groups are growing rapidly and targeting various e-commerce platforms using a variety of ways to remain undetected. The Zscaler ThreatLabZ research team has been tracking these skimmer groups and monitoring the t...
ransomware
Ransomware
2 Min read

Coverage Advisory for DarkSide Ransomware Activity Targeting Manufacturing, Legal, Insurance, Healthcare and Energy Sectors

Background A cybersecurity advisory was released by the Federal Bureau of Investigation (FBI) related to a DarkSide ransomware infection targeting manufacturing, legal, insurance, healthcare and energy sectors. In May...
Zero-day Exploits Related to Microsoft Exchange Servers
Security Insights
3 Min read

Coverage Advisory for Exploits Related to Microsoft Exchange Servers

Update [19-Mar-2021] Microsoft has released to GitHub the new Microsoft Exchange On-Premises Mitigation Tool and posted a blog with step-by-step instructions on how to use the tool. This is a free, one-click tool desi...
Phishing activity
Security Insights
7 Min read

Election 2020-themed scams and threat activities

The United States presidential election is here. And as COVID-19 still runs unchecked throughout the world, 2020 continues to be an outlier year in so many ways. But one thing remains constant—scammers and threat actors ...
Top Exploit Kit Activity Roundup—Spring 2020
Security Insights
4 Min read

Top Exploit Kit Activity Roundup—Spring 2020

This is the eleventh in a series of quarterly roundups by the Zscaler ThreatLabZ research team in which we collect and analyze the activity of the top exploit kits (EKs) during the past three months. For the past few ...
Microsoft Remote Code Execution vulnerability in SMBv3 service: CVE-2020-0796
Security Insights
1 Min read

Microsoft Remote Code Execution vulnerability in SMBv3 service: CVE-2020-0796

Background On 12th March 2020 Microsoft has released a Security guidance regarding Remote Code Execution vulnerability in the way that Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. A ...
Top exploit kit activity roundup – Spring 2019
Security Insights
6 Min read

Top exploit kit activity roundup – Spring 2019

This is the tenth in a series of quarterly roundups by the Zscaler ThreatLabZ research team in which we collect and analyze the activity of the top exploit kits over the last three months. Exploit kits (EKs) are rapidly ...
Top Exploit Kit Activity Roundup – Winter 2019
Security Insights
4 Min read

Top Exploit Kit Activity Roundup – Winter 2019

This is the ninth in a series of quarterly roundups by Zscaler ThreatLabZ researchers, in which the team collects and analyzes the recent activity of current exploit kits. Exploit kits (EKs) are rapidly deployable softwa...
Zscaler ThreatLabZ Phishing Roundup
Security Insights
7 Min read

Zscaler ThreatLabZ Phishing Roundup

Phishing is an attempt to steal personally identifiable information, such as Social Security numbers, credit card details, date of birth, and other sensitive data. Typically, phishing targets a user with an email contain...
Exploit kits go cryptomining – Summer 2018 edition
Security Insights
6 Min read

Exploit kits go cryptomining – Summer 2018 edition

Overview This is the ninth edition of our Quarterly Exploit Kit activity roundup series, in which we share our analysis of recent exploit kit activity. Exploit kits (EKs) are rapidly deployable software packages desig...
SMiShing with Punycode
Security Insights
4 Min read

SMiShing with Punycode

Cybercriminals keep coming up with new ways to steal and profit from personal user data. Because mobile devices are so prevalent, and so capable, they are becoming the targets of a variety of cyberattacks that were previ...
Top Exploit Kit Activity Roundup – Spring 2018
Security Insights
4 Min read

Top Exploit Kit Activity Roundup – Spring 2018

Overview This is the eighth in a series of blogs by the Zscaler ThreatLabZ research team collecting and analyzing the recent activity of the top exploit kits. Exploit kits (EKs) are rapidly deployable software package...
Top Exploit Kit Activity Roundup - Winter 2018
Security Insights
5 Min read

Top Exploit Kit Activity Roundup - Winter 2018

Overview This is the seventh in a series of blogs collecting the recent activity of the current top exploit kits. Exploit kits are rapidly deployable software packages designed to leverage vulnerabilities in web brows...
Terror Exploit Kit via Malvertising campaign
Security Insights
3 Min read

Terror Exploit Kit via Malvertising campaign

Terror Exploit Kit (EK) is one of the newer EKs that came to the scene in early 2017 and was mentioned in our Winter 2017 quarterly EK roundup where it was mainly installing ccminer Bitcoin mining applications. Terror EK...
BESCOM users being redirected to RIG EK
Security Insights
2 Min read

BESCOM users being redirected to RIG EK

BESCOM (Bangalore Electricity Supply Company Limited) is responsible for power distribution in eight districts of the Indian state Karnataka. The total area is roughly 15,900 square miles and serves a population of rough...
Top Exploit Kit Activity Roundup - Summer 2017
Security Insights
5 Min read

Top Exploit Kit Activity Roundup - Summer 2017

Overview This is the sixth installment in a series of blogs highlighting the recent activity of the top exploit kits. Exploit kits (EKs) are rapidly deployable software packages designed to leverage vulnerabilities in...
Wonder Woman, Piracy, and the Cerber Ransomware
Ransomware
3 Min read

Wonder Woman, Piracy, and the Cerber Ransomware

It’s become a lucrative business for malicious actors to host illegal streaming websites and upload or link to bootlegged content. The income from such activity is generated from the advertisements served to visitors. At...
Top Exploit Kit Activity Roundup - Spring 2017
Security Insights
5 Min read

Top Exploit Kit Activity Roundup - Spring 2017

Overview This is the fifth in a series of posts in which we're examining recent activity of the current top exploit kits. An exploit kit (EK) is a rapidly deployable software package designed to leverage vulnerabiliti...
JavaScript Malspam Campaigns
Security Insights
3 Min read

JavaScript Malspam Campaigns

Introduction: The Zscaler ThreatLabz team has observed multiple active malspam campaigns with links to malicious JavaScript payloads in the wild. These JavaScript files when opened by the end user will trigger downloa...
March Madness Fake Streams and Phishing Attempts
Security Insights
4 Min read

March Madness Fake Streams and Phishing Attempts

March Madness is in full swing and the Sweet 16 games are upon us! While enthusiasts everywhere prepare to stream their favorite teams' games, the increased interest in the tournament has also attracted the attention of ...

Related Articles

Explore More Topics