Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

Hero Panel Image
Security Research
Multiloginbot stealing the data and sending it to malware author via chat service.
Insights and Research
6 Min read

New MultiloginBot Phishing Campaign

Multilogin is an application designed to make it easier to log into multiple accounts on a single website or platform simultaneously. Recently, Zscaler ThreatLabz has come across a live phishing campaign that is targeting genuine Multilogin users by tricking the users into downloading a malicious installer. The installer is hosted on newly register...
IoT traffic spying
Insights and Research
4 Min read

New Insights: Is China watching your IoT traffic?

To add insult to injury, the Internet of Things (IoT) doesn’t just have notoriously poor security, the connected devices are now front and center in the fallout of critical control systems. These days, everyone is taking notice…or maybe not. In July 2021, the White House warned that if the Russian government didn’t take action against ransomware...
ransomware
Ransomware
3 Min read

AtomSilo Ransomware Enters the League of Double Extortion

Ransomware is used widely in cyberattacks to disrupt the victim's organization. Over the last two years, many attackers have evolved their ransomware tactics to include data exfiltration. This tactic is known as "double-extortion": attackers demand ransom for the data decryption in addition to the ransom to prevent public release of the stolen data...
New Trickbot and BazarLoader campaigns use multiple delivery vectors
Insights and Research
6 Min read

New Trickbot and BazarLoader campaigns use multiple delivery vectors

The Zscaler ThreatLabz research team monitors thousands of files daily tracking new and pervasive threats, including one of the most prominent banking trojans of the last five years: Trickbot. Trickbot has been active since 2016 and is linked to a large number of malicious campaigns involving bitcoin mining and theft of banking information, person...
Cyber security
Insights and Research
11 Min read

Squirrelwaffle: New Loader Delivering Cobalt Strike

Zscaler ThreatLabz has been following an emerging new malware loader known as Squirrelwaffle that is being used to deliver Cobalt Strike. In this blog, we will be analyzing the complete attack chain for this new malware family (as shown in Figure 1). This campaign has been running since mid-September 2021. The Squirrelwaffle loader is being deliver...
Bitcoin/Ethereum Scam
Insights and Research
2 Min read

Scammer luring Apple enthusiasts on launch event

We often see scammers luring victims by taking advantage of hype related to events or game launches. We observed a similar tactic during the iPhone 13 launch event. Due to the COVID-19 pandemic, this was an online launch event and was broadcasted live on the official Apple Youtube channel. But, there were few Youtube channels that were claiming to ...
FakeClicky Activity: Skimmers Hit Again
Insights and Research
4 Min read

FakeClicky Activity: Skimmers Hit Again

Zscaler ThreatLabz team monitors different skimmer groups and recently we have seen a spike in the use of the FakeClicky skimmer loader to steal payment details from e-commerce websites. This skimmer has been active for at least the past 2 years. Skimmer groups continue to enhance their techniques to evade detection, using multiple evasion techn...
CVE-2021-40444
Insights and Research
2 Min read

Security Advisory: Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444)

Background On 7th September 2021, Microsoft released an advisory for CVE-2021-40444. The CVE has a CVSS score of 8.8. What is the issue? Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444) Microsoft has released an advisory for CVE-2021-40444, a Remote Code Execution Vulnerability in MSHTML that affects Microsoft Windo...
cover image
Insights and Research
13 Min read

CloudFall Targets Researchers and Scientists Invited to International Military Conferences in Central Asia and Eastern Europe

In August 2021, Zscaler ThreatLabz identified several malicious Microsoft Word documents which used a multi-stage attack-chain abusing Cloudflare Workers and features of MS Office Word to target users in Central Asia and Eastern Europe. Based on the social engineering lures used in the decoy content, we conclude with a moderate confidence level ...
Olympics 2020 targeted by fake streaming sites and Adware sites
Insights and Research
3 Min read

Fake Streaming & Adware Target Olympics 2020

Online streaming of sporting events has increased since the Rio 2016 Olympics. The Olympics is a very popular event attracting billions of viewers across the globe -- and between cord-cutting and COVID-19, more viewers streamed the recent Summer Olympic games than ever before. Most of the streaming transactions observed by the Zscaler ThreatLabz t...

Explore More Topics