Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

A generic silhouette of a person.

Rohit Hegde

Security Research
CVE-2021-40444
Insights and Research
2 Min read

Security Advisory: Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444)

Background On 7th September 2021, Microsoft released an advisory for CVE-2021-40444. The CVE has a CVSS score of 8.8. What is the issue? Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444) M...
Olympics 2020 targeted by fake streaming sites and Adware sites
Insights and Research
3 Min read

Fake Streaming & Adware Target Olympics 2020

Online streaming of sporting events has increased since the Rio 2016 Olympics. The Olympics is a very popular event attracting billions of viewers across the globe -- and between cord-cutting and COVID-19, more viewers s...
Supply Chain Attack, Ransomware REvil
Insights and Research
3 Min read

Coverage Advisory for Kaseya VSA Supply-Chain Ransomware Attack

Background On July 2, 2021, Kaseya, an IT Management software firm, disclosed a security incident impacting their on-prem version of Kaseya VSA software. Kaseya VSA is a cloud-based MSP platform that allows service pr...
Recent Magecart trends and enhancements
Insights and Research
5 Min read

Magecart Attacks in 2021

Skimmer groups are growing rapidly and targeting various e-commerce platforms using a variety of ways to remain undetected. The Zscaler ThreatLabZ research team has been tracking these skimmer groups and monitoring the t...
ransomware
Ransomware
2 Min read

Coverage Advisory for DarkSide Ransomware Activity Targeting Manufacturing, Legal, Insurance, Healthcare and Energy Sectors

Background A cybersecurity advisory was released by the Federal Bureau of Investigation (FBI) related to a DarkSide ransomware infection targeting manufacturing, legal, insurance, healthcare and energy sectors. In May...
Zero-day Exploits Related to Microsoft Exchange Servers
Insights and Research
3 Min read

Coverage Advisory for Exploits Related to Microsoft Exchange Servers

Update [19-Mar-2021] Microsoft has released to GitHub the new Microsoft Exchange On-Premises Mitigation Tool and posted a blog with step-by-step instructions on how to use the tool. This is a free, one-click tool desi...
Phishing activity
Insights and Research
7 Min read

Election 2020-themed scams and threat activities

The United States presidential election is here. And as COVID-19 still runs unchecked throughout the world, 2020 continues to be an outlier year in so many ways. But one thing remains constant—scammers and threat actors ...
Top Exploit Kit Activity Roundup—Spring 2020
Insights and Research
4 Min read

Top Exploit Kit Activity Roundup—Spring 2020

This is the eleventh in a series of quarterly roundups by the Zscaler ThreatLabZ research team in which we collect and analyze the activity of the top exploit kits (EKs) during the past three months. For the past few ...
Microsoft Remote Code Execution vulnerability in SMBv3 service: CVE-2020-0796
Insights and Research
1 Min read

Microsoft Remote Code Execution vulnerability in SMBv3 service: CVE-2020-0796

Background On 12th March 2020 Microsoft has released a Security guidance regarding Remote Code Execution vulnerability in the way that Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. A ...
Top exploit kit activity roundup – Spring 2019
Insights and Research
6 Min read

Top exploit kit activity roundup – Spring 2019

This is the tenth in a series of quarterly roundups by the Zscaler ThreatLabZ research team in which we collect and analyze the activity of the top exploit kits over the last three months. Exploit kits (EKs) are rapidly ...
Top Exploit Kit Activity Roundup – Winter 2019
Insights and Research
4 Min read

Top Exploit Kit Activity Roundup – Winter 2019

This is the ninth in a series of quarterly roundups by Zscaler ThreatLabZ researchers, in which the team collects and analyzes the recent activity of current exploit kits. Exploit kits (EKs) are rapidly deployable softwa...
Zscaler ThreatLabZ Phishing Roundup
Insights and Research
7 Min read

Zscaler ThreatLabZ Phishing Roundup

Phishing is an attempt to steal personally identifiable information, such as Social Security numbers, credit card details, date of birth, and other sensitive data. Typically, phishing targets a user with an email contain...
Exploit kits go cryptomining – Summer 2018 edition
Insights and Research
6 Min read

Exploit kits go cryptomining – Summer 2018 edition

Overview This is the ninth edition of our Quarterly Exploit Kit activity roundup series, in which we share our analysis of recent exploit kit activity. Exploit kits (EKs) are rapidly deployable software packages desig...
SMiShing with Punycode
Insights and Research
4 Min read

SMiShing with Punycode

Cybercriminals keep coming up with new ways to steal and profit from personal user data. Because mobile devices are so prevalent, and so capable, they are becoming the targets of a variety of cyberattacks that were previ...
Top Exploit Kit Activity Roundup – Spring 2018
Insights and Research
4 Min read

Top Exploit Kit Activity Roundup – Spring 2018

Overview This is the eighth in a series of blogs by the Zscaler ThreatLabZ research team collecting and analyzing the recent activity of the top exploit kits. Exploit kits (EKs) are rapidly deployable software package...
2018 Tax Season Phishing Scams
Insights and Research
4 Min read

2018 Tax Season Phishing Scams

Cybercriminals have long used social engineering and phishing techniques to lure unsuspecting users into giving away private information. They track current trends and events to make their attacks more effective, and tax...
Top Exploit Kit Activity Roundup - Winter 2018
Insights and Research
5 Min read

Top Exploit Kit Activity Roundup - Winter 2018

Overview This is the seventh in a series of blogs collecting the recent activity of the current top exploit kits. Exploit kits are rapidly deployable software packages designed to leverage vulnerabilities in web brows...
Terror Exploit Kit via Malvertising campaign
Insights and Research
3 Min read

Terror Exploit Kit via Malvertising campaign

Terror Exploit Kit (EK) is one of the newer EKs that came to the scene in early 2017 and was mentioned in our Winter 2017 quarterly EK roundup where it was mainly installing ccminer Bitcoin mining applications. Terror EK...
BESCOM users being redirected to RIG EK
Insights and Research
2 Min read

BESCOM users being redirected to RIG EK

BESCOM (Bangalore Electricity Supply Company Limited) is responsible for power distribution in eight districts of the Indian state Karnataka. The total area is roughly 15,900 square miles and serves a population of rough...
Top Exploit Kit Activity Roundup - Summer 2017
Insights and Research
5 Min read

Top Exploit Kit Activity Roundup - Summer 2017

Overview This is the sixth installment in a series of blogs highlighting the recent activity of the top exploit kits. Exploit kits (EKs) are rapidly deployable software packages designed to leverage vulnerabilities in...
Wonder Woman, Piracy, and the Cerber Ransomware
Ransomware
3 Min read

Wonder Woman, Piracy, and the Cerber Ransomware

It’s become a lucrative business for malicious actors to host illegal streaming websites and upload or link to bootlegged content. The income from such activity is generated from the advertisements served to visitors. At...
Top Exploit Kit Activity Roundup - Spring 2017
Insights and Research
5 Min read

Top Exploit Kit Activity Roundup - Spring 2017

Overview This is the fifth in a series of posts in which we're examining recent activity of the current top exploit kits. An exploit kit (EK) is a rapidly deployable software package designed to leverage vulnerabiliti...
JavaScript Malspam Campaigns
Insights and Research
3 Min read

JavaScript Malspam Campaigns

Introduction: The Zscaler ThreatLabz team has observed multiple active malspam campaigns with links to malicious JavaScript payloads in the wild. These JavaScript files when opened by the end user will trigger downloa...
March Madness Fake Streams and Phishing Attempts
Insights and Research
4 Min read

March Madness Fake Streams and Phishing Attempts

March Madness is in full swing and the Sweet 16 games are upon us! While enthusiasts everywhere prepare to stream their favorite teams' games, the increased interest in the tournament has also attracted the attention of ...

Explore More Topics