Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

A generic silhouette of a person.

Sameer Patil

Increase in jRAT Campaigns
Insights and Research
3 Min read

Increase in jRAT Campaigns

The Zscaler ThreatLabZ team has detected a rise in Java-based remote access Trojan variants — jRATs — which give attackers a backdoor into a victim's system and can be capable of remotely taking control of the system onc...
Threat Campaigns during the U.S. Election
Insights and Research
4 Min read

Threat Campaigns during the U.S. Election

U.S. presidential elections are among the most followed political events in the world. Many U.S. policies, as they apply to foreign affairs, are dependent upon the outcome of the race as well as the political party that ...
Compromised WordPress Campaign - Spyware Edition
Insights and Research
4 Min read

Compromised WordPress Campaign - Spyware Edition

[Update - October 9, 2015] Multiple Drupal & Joomla sites affected.. The Spyware campaign we wrote about two weeks ago continues to be active, although the number of infected websites has gone down. We are a...
Compromised WordPress Sites Leaking Credentials
Insights and Research
2 Min read

Compromised WordPress Sites Leaking Credentials

Zscaler recently observed a credentials leak campaign on multiple WordPress sites. The compromised sites run backdoor code, which activates when the user submits login credentials. The credentials are encoded and sent to...
Fiesta Exploit Kit: Live Infection
Insights and Research
6 Min read

Fiesta Exploit Kit: Live Infection

During our daily hunt for Exploit Kits (EK), we came across many live Fiesta exploit chains. The infection started from the following compromised domains: orpi.com soyentrepreneur.com ...
Dissecting The CVE-2013-2460 Java Exploit
Insights and Research
5 Min read

Dissecting The CVE-2013-2460 Java Exploit

Introduction In this vulnerability, code is able to get the references of some restricted classes which are cleverly used for privilege escalation and bypassing the JVM sandbox. The vulnerable “invoke” method of the “...
Exploring The Java Vulnerability (CVE-2013-2465) Used In The Fiesta EK
Insights and Research
4 Min read

Exploring The Java Vulnerability (CVE-2013-2465) Used In The Fiesta EK

While going through our daily analysis this month, we came across several Fiesta Exploit Kit attacks. Although this EK first emerged in August 2013, the authors have constantly updated their exploitation code to evade de...
FIFA World Cup Fake Streaming
Insights and Research
3 Min read

FIFA World Cup Fake Streaming

We all love football and when the world cup is around, we take a break from office, switch on the TV and enjoy the game! According to the estimates, billions of people will watch the matches live. A good proportion of ...

Explore More Topics