Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user SDesai@zscaler.com

Shivang Desai

Phishing
Insights and Research
5 Min read

How a Phishing Campaign Targeting Indian Banking Users is Distributing an SMS Stealer

Scammers are always coming up with new, more sophisticated social engineering techniques to collect user credentials for financial benefit. However, when it comes to banking websites, capturing login credentials via a ph...
Android Malware Flubot
Zscaler Cloud Platform
3 Min read

Zscaler Protections Against Flubot Banking Malware

A huge wave of the Flubot malware has been making its rounds in the wild, primarily targeting users in Europe -- particularly the UK -- and in the US. Flubot is an Android banking malware which lures victims to instal...
Cover Image
Insights and Research
6 Min read

Among Us Imposter on Google Play

Developing an app that is downloaded millions of times means success for the developer. But, quite often, it also means the app becomes a target for cybercriminals. This is the case with the wildly popular game Among ...
TikTok Spyware
Insights and Research
10 Min read

TikTok Spyware

A recent threat to ban TikTok in the United States has taken the internet by storm and received mixed reactions from social media and internet users. U.S. President Donald Trump has ordered ByteDance, the parent c...
Android Spyware Targeting Tanzania Premier League
Insights and Research
4 Min read

Android Spyware Targeting Tanzania Premier League

The Zscaler ThreatLabZ team is always hunting for malware out in the wild. Recently, there have been endless cases where attackers were targeting mobile users with malware leveraging the COVID-19 pandemic. Amidst all...
New Android App Offers Coronavirus Safety Mask But Delivers SMS Trojan
Insights and Research
3 Min read

New Android App Offers Coronavirus Safety Mask But Delivers SMS Trojan

Amidst the coronavirus/COVID-19 pandemic, attackers continue to seek ways to exploit the public's fears to victimize online users. ThreatLabZ researchers recently came across a domain named coronavirusapp[.]site that...
CovidLock: Android Ransomware Walkthrough and Unlocking Routine
Ransomware
5 Min read

CovidLock: Android Ransomware Walkthrough and Unlocking Routine

As the coronavirus has been declared a pandemic, bad actors are certainly going to take advantage of the uncertainty around it to attack a large number of online users. The Zscaler ThreatLabZ team recently came across...
A New Wave of Stalkerware Apps
Insights and Research
7 Min read

A New Wave of Stalkerware Apps

Recently, the U.S. Department of Homeland Security (DHS) released an article warning mobile users about the increasing use of spyware apps. The US-CERT (Computer Emergency Response Team) issued the following statemen...
UC Browser app abuses may have exposed 500 million users
Insights and Research
6 Min read

UC Browser app abuses may have exposed 500 million users

Recently, when examining the Zscaler cloud for unusual activity, ThreatLabZ researchers found some questionable hits in relation to a particular domain: 9appsdownloading[.]com. Upon analysis, we found these requests bein...
From third-party Android store to SMS Trojan
Insights and Research
6 Min read

From third-party Android store to SMS Trojan

In lieu of downloading and installing apps from the official Android app store, users often turn to third-party stores. The reasons vary, from wanting a particular app that isn’t available on the official store to seekin...
A sneak peek into recent IoT attacks
Insights and Research
8 Min read

A sneak peek into recent IoT attacks

Since the Mirai botnet source code was leaked in 2016, it was inevitable that we’d see its variants being put to use in IoT threat campaigns. Apart from using brute-force techniques to attack IoT devices through various ...
Soulmate: A Dating App That Spies On You
Insights and Research
4 Min read

Soulmate: A Dating App That Spies On You

During a recent hunt for malware, the Zscaler™ ThreatLabZ team came across a piece of spyware disguised as an Android app and hosted on Google Play, Google’s official Android app store. The app portrays itself as partner...
Why you shouldn't trust "safe" spying apps!
Insights and Research
5 Min read

Why you shouldn't trust "safe" spying apps!

During a recent malware hunt, the ZscalerTM ThreatLabZ research team came across a suspicious Android app on Google Play, the official Google app store, named SPYMIE. SPYMIE portrays itself as an Android-based key logger...
Mobile App Wall Of Shame: Trip38
Insights and Research
4 Min read

Mobile App Wall Of Shame: Trip38

Compared to Android users, iOS users tend to feel fairly safe from lurking threats. But, occasionally, that sense of security is tested. Zscaler ThreatLabZ recently came across an app that had a significant flaw, causing...
RuMMS malware is back…with enhancements
Insights and Research
13 Min read

RuMMS malware is back…with enhancements

Recently, the Zscaler ThreatLabZ team came across a nasty piece of malware hosted on a fake MMS website called mmsprivate[.]site. The site lures victims with what seem to be private photos, inviting them to take a closer...
Fake Teleg'e'ram on Google Play
Insights and Research
3 Min read

Fake Teleg'e'ram on Google Play

Recently, the Russian government ordered the immediate blocking of the messaging app Telegram and requested its removal from the Apple App Store and Google Play Store. In reviewing activities around this matter, Zscaler ...
Spyware presence in enterprise networks
Insights and Research
4 Min read

Spyware presence in enterprise networks

There are apps for everything, including spying. Users often download such apps for little to no cost and for innocent reasons, such as monitoring their children’s activity on mobile devices. However, what happens when t...
Don't lose your privacy for Sarahah's Anonymity
Insights and Research
5 Min read

Don't lose your privacy for Sarahah's Anonymity

A new app called Sarahah, which allows people to receive anonymous feedback messages from friends and coworkers, has been quickly gaining popularity. Though it seems like a good concept, the app has already been criticiz...
Malicious Android Ads leading to drive by downloads
Insights and Research
4 Min read

Malicious Android Ads leading to drive by downloads

The Zscaler ThreatLabZ team recently identified an Android app that was downloading itself from advertisements posted on forums. Malvertising is a growing problem and one that we have covered on past occasions, especiall...
Android Spyware SMSVova posing as system update on Play Store
Insights and Research
4 Min read

Android Spyware SMSVova posing as system update on Play Store

In our ongoing effort to hunt malware, the Zscaler ThreatLabz team came across a highly suspicious app on the U.S. Google Play Store that has been downloaded between one and five million times since 2014. Upon analysis, ...
SpyNote RAT posing as Netflix app
Insights and Research
6 Min read

SpyNote RAT posing as Netflix app

Watch on Fox News: Hackers may use fake Netflix app to spy on users As users have become more attached to their mobile devices, they want everything on those devices. There’s an app for just about any facet of one...
Android malware targeting South Korean mobile users
Insights and Research
4 Min read

Android malware targeting South Korean mobile users

In a recent cycle of malware hunting, ThreatLabZ came across a malicious Android application specifically targeting South Korea. There have been a few attempts in the past to target South Korea, in which malicious apps w...
Android Banker malware goes social
Insights and Research
6 Min read

Android Banker malware goes social

During a regular hunt for malware, our researchers came across an interesting malicious Android app that portrayed itself as an online app for the reputable Russian bank Sberbank, which is the largest bank in Russia and ...
Adult themed Android SMS Stealer Trojan
Insights and Research
4 Min read

Adult themed Android SMS Stealer Trojan

During our continued efforts to protect our customers against the latest mobile threats, we came across another malicious app that used pornography to attract users. Noting that 1 in 5 mobile searches are related to po...
Fake Security App For AliPay Customers - Android SMS Stealer
Insights and Research
4 Min read

Fake Security App For AliPay Customers - Android SMS Stealer

During an ongoing analysis to protect our customers from the latest mobile threats, we came across an Android malware that disguised itself as a security feature for a famous Chinese online payment app, AliPay. Upon an...
Infostealer APK Posing As Microsoft Word Document
Insights and Research
4 Min read

Infostealer APK Posing As Microsoft Word Document

Recently, we came across a piece of Android malware which was neither a porn app nor a battery status app, but was instead designed to look like a Microsoft Word document. This malicious app portrays itself as a docume...
More Adult Themed Android Ransomware
Ransomware
3 Min read

More Adult Themed Android Ransomware

During the course of our daily malware hunt, we came across a new mobile ransomware variant that leverages pornography to lure victims into downloading and installing it. We'd previously blogged about similar Android mal...
Fake BatteryBotPro ClickFraud, AdFraud, SMS & Downloader Trojan
Insights and Research
4 Min read

Fake BatteryBotPro ClickFraud, AdFraud, SMS & Downloader Trojan

[UPDATE #1 - July 8, 2015] We would like to clarify that at the time of our analysis, the app was not present on the Google Store. We found references to this fake app being hosted on the Google Play store during our res...

Explore More Topics