Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

Hero Panel Image
Security Research
FakeClicky Activity: Skimmers Hit Again
Insights and Research
4 Min read

FakeClicky Activity: Skimmers Hit Again

Zscaler ThreatLabz team monitors different skimmer groups and recently we have seen a spike in the use of the FakeClicky skimmer loader to steal payment details from e-commerce websites. This skimmer has been active for at least the past 2 years. Skimmer groups continue to enhance their techniques to evade detection, using multiple evasion techn...
CVE-2021-40444
Insights and Research
2 Min read

Security Advisory: Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444)

Background On 7th September 2021, Microsoft released an advisory for CVE-2021-40444. The CVE has a CVSS score of 8.8. What is the issue? Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444) Microsoft has released an advisory for CVE-2021-40444, a Remote Code Execution Vulnerability in MSHTML that affects Microsoft Windo...
cover image
Insights and Research
13 Min read

CloudFall Targets Researchers and Scientists Invited to International Military Conferences in Central Asia and Eastern Europe

In August 2021, Zscaler ThreatLabz identified several malicious Microsoft Word documents which used a multi-stage attack-chain abusing Cloudflare Workers and features of MS Office Word to target users in Central Asia and Eastern Europe. Based on the social engineering lures used in the decoy content, we conclude with a moderate confidence level ...
Olympics 2020 targeted by fake streaming sites and Adware sites
Insights and Research
3 Min read

Fake Streaming & Adware Target Olympics 2020

Online streaming of sporting events has increased since the Rio 2016 Olympics. The Olympics is a very popular event attracting billions of viewers across the globe -- and between cord-cutting and COVID-19, more viewers streamed the recent Summer Olympic games than ever before. Most of the streaming transactions observed by the Zscaler ThreatLabz t...
Ransomware hacker
Ransomware
3 Min read

DoppelPaymer Continues to Cause Grief Through Rebranding

In early May 2021, DoppelPaymer ransomware activity dropped significantly. Although the DoppelPaymer leak site still remains online, there has not been a new victim post since May 6, 2021. In addition, no victim posts have been updated since the end of June. This lull is likely a reaction to the Colonial Pipeline ransomware attack which occurred on...
Joker Joking in Google Play
Insights and Research
8 Min read

Joker Joking in Google Play

Joker is one of the most prominent malware families targeting Android devices. Despite public awareness of this particular malware, it keeps finding its way into Google’s official application market by employing changes in its code, execution methods, or payload-retrieving techniques. This spyware is designed to steal SMS messages, contact lists, a...
office buildings
Zscaler Cloud Platform
3 Min read

IoT in the Enterprise Report: Empty Office Edition

It happened overnight for many enterprises. Bustling offices turned into desolate spaces--abandoning plants to die, snacks to go stale, and calendars to remain frozen in time. And like out of a movie, amidst the eerie quiet there was something still alive and buzzing with activity. Neglected in the buildings, set top boxes, digital signage, netw...
Spear Phishing attack
Insights and Research
7 Min read

Targeted Attack on Government Organizations Delivers Netwire RAT

The Zscaler ThreatLabz team has observed an interesting spear phishing campaign beginning July 2021 in which a threat actor is targeting a wide range of organizations in Pakistan. NetwiredRC is being used as the final payload in this attack campaign. The combination of spear phishing and the use of information stealing RAT indicates that this is no...
threats
Insights and Research
3 Min read

ThreatLabZ June 2021 Report: Deconstructing Kaseya Supply-Chain Attack and the Minebridge RAT Campaign

This post also appeared on the CXO REvolutionaries site. Read more here. With the petabytes of daily data transactions it secures, the Zscaler ThreatLabZ security research team has a unique view of the latest cybersecurity trends and, more importantly, threat activity. This month, we deconstructed the new Kaseya VSA supply-chain attack and took ...
supply chain ransomware attack
Insights and Research
5 Min read

Stop the Next Kaseya Attack

Watch the on-demand replay of the July 13th ThreatLabz webinar for a deep dive into the Kaseya attack and how to defend against it. While Americans were prepping for their long Fourth of July weekends, cybercriminals were preparing a widespread ransomware attack on businesses around the world using a vulnerability in the Kaseya VSA remote monit...

Explore More Topics