Company > Blogs

News and views from the leading voice
in secure digital transformation

Insights and Research
SSL threats
Insights and Research
4 Min read

2020: The State of Encrypted Attacks

This blog is an overview of the latest threat research conducted by ThreatLabZ, Zscaler’s security research team. The full report is available here. While SSL/TLS encryption is the industry standard for protecting data in transit from prying eyes, encryption has, itself, become a threat. It is often leveraged by attackers to sneak malware past s...
Phishing activity
Insights and Research
7 Min read

Election 2020-themed scams and threat activities

The United States presidential election is here. And as COVID-19 still runs unchecked throughout the world, 2020 continues to be an outlier year in so many ways. But one thing remains constant—scammers and threat actors taking advantage of current topics for their own profit. Strangely, this is probably the most normal aspect of 2020 thus far. ...
APT-31 leverages COVID-19 Vaccine theme and abuses legitimate online services
Insights and Research
32 Min read

APT-31 Leverages COVID-19 Vaccine Theme and Abuses Legitimate Online Services

Recently, Zscaler's ThreatLabZ team discovered several malicious MSI installer binaries that were hosted on attacker-controlled GitHub accounts and distributed in-the-wild in August 2020. These MSI binaries dropped and displayed decoy content using a theme around a COVID-19 vaccine as a social engineering technique. After further analysis of the...
formula-for-flawless-data-protection
Insights and Research
4 Min read

The Formula for Flawless Data Protection

Your data is under attack. That statement shouldn’t take anyone by surprise. But do you have the right data protection platform in place to keep your data safe? Judging by recent news reports and statistics, the answer is…no. An ongoing problem Reports of data breaches seem to make the news on a daily basis. While writing this blog, a re...
Internet Attack Surface Analysis tool
Insights and Research
3 Min read

Measuring Your Attackable Threat Surface With the Zscaler Internet Attack Surface Analysis Tool

This was originally published on LinkedIn on October 13, 2020, Did you leave the window open? Lock the door? The invitations to cyberattacks are there. And bad actors can see them. But can you? Few enterprises have a solid grasp of their own vulnerability to cyberattacks. Attackers seek entrance in the form of enterprise IP addresses and name...
woman-leading-it-sector
Insights and Research
4 Min read

When Technology isn’t the Problem: The Psychology of IT Transformation

This post was originally published on LinkedIn on September 16, 2020 Enterprises transform network architectures to become more agile and better able to meet business goals. But transitioning your network from a traditional hub-and-spoke network to a cloud services model can be a daunting task. Transformation leaders (like you) must address co...
cover image
Insights and Research
17 Min read

Targeted Attacks on Oil and Gas Supply Chain Industries in the Middle East

Cybercriminals are known to look to current events to make their schemes and campaigns more engaging and relevant to unsuspecting victims. These events don't need to be global in nature, and are often only of local or regional interest. This helps the bad actors narrow their target hoping for a greater chance of success. So when the Abu Dhabi Na...
Spear Phishing campaign delivering Buer and Bazar
Insights and Research
10 Min read

Spear Phishing Campaign Delivers Buer and Bazar Malware

Zscaler ThreatLabZ became aware of a prevalent phishing campaign targeting employees of various organizations. During the past couple of weeks, many enterprise users have been getting spear phishing emails indicating that their employment with the company has been terminated. These emails contain a Google document link that leads to the Bazar b...
Android Malware
Insights and Research
7 Min read

Joker Playing Hide-and-Seek with Google Play

Joker is one of the most prominent malware families that continually targets Android devices. Despite awareness of this particular malware, it keeps finding its way into Google’s official application market by employing changes in its code, execution methods, or payload-retrieving techniques. This spyware is designed to steal SMS messages, contact ...
secrets
Insights and Research
2 Min read

Join Us Live: Three Secrets to Stopping Ransomware Cold

Zscaler will be hosting a webinar covering ransomware's ins and outs and what you can do to keep your organization safe. Learn more and secure your spot here. Ransomware continues to dominate headlines worldwide, with recent estimates surpassing $20 billion of damages in 2020 alone. Today’s adversaries are using a diverse set of methodologies t...

Explore More Topics