Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

Hero Panel Image
Security Research
Job scams impersonate companies still hiring following tech layoffs
Insights and Research
5 Min read

Job scams impersonate companies still hiring following tech layoffs

Summary In the midst of significant layoffs hitting the previously immune tech industry, scammers have mobilized and doubled down on targeting job seekers with various employment scams. Stealing personal information and extorting victims for money, these scams leverage fake job postings, sites or portals, and forms, wrapped in social engineering...
""
Insights and Research
12 Min read

Album Stealer Targets Facebook Adult-Only Content Seekers

Information stealing malware is commonly observed in the landscape of cyber attacks today. Zscaler ThreatLabz team has discovered many new types of stealer malware families across different attack campaigns. Recently, the Zscaler ThreatLabz research team has spotted a new information stealer named Album. This blog will walk through the malware dist...
A 2022 Year-end Recap on Cloud Threats
Zscaler Cloud Platform
4 Min read

A 2022 Year-end Recap on Cloud Threats

As the year is coming to an end, I can’t help but take a walk down memory lane to reminisce and reflect on the journey of the cloud threat landscape. Here’s my take on this 2022 recap of cloud threats. First things first, I think it’s safe to say that this year has been a rollercoaster of non-stop cyberattacks. Particularly the cloud threat lan...
Trade with caution - bad guys are stealing
Insights and Research
8 Min read

Trade with caution - bad guys are stealing

Threats continue to evolve in their complexity and scale as cyber criminals regularly come up with new ideas and find ways to target their victims. Modern information stealer families such as RedLine, RecordBreaker, ArkeiStealer, Vidar, Satacom, BatLoader are often sold through Malware-as-a-Service (MaaS) models and they continuously update wit...
Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization
Insights and Research
6 Min read

Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization

What happened in the Okta source code breach? Okta, a leading provider of authentication services and Identity and Access Management (IAM) solutions, confirmed that its private GitHub repositories were hacked this month. According to an email notification reported by BleepingComputer, and later confirmed by Okta security post, the incident invol...
Ransomware hacker
Ransomware
5 Min read

Nokoyawa Ransomware: Rust or Bust

Key Points Nokoyawa is a 64-bit Windows-based ransomware family that emerged in February 2022 The threat group behind Nokoyawa performs double extortion ransomware attacks: exfiltrating sensitive information from organizations, followed by file encryption and a ransom payment demand Nokoyawa was initially written in the C programming lang...
ThreatLabz State of Encrypted Attacks 2022 Report exposes hidden threats
Insights and Research
5 Min read

Spoiler: New ThreatLabz Report Reveals Over 85% of Attacks Are Encrypted

Once upon a time, encrypted traffic was considered the safe, secure option for browsing and doing business online. Going back nine years to December 2013, the Google Transparency Report shows just 48% of worldwide web traffic was encrypted. Flash forward to today, and the volume of encrypted web traffic tracked by Google is up to 95%. However, the ...
FreeBSD Ping Stack-Based Overflow Security Advisory
Insights and Research
4 Min read

Security Advisory for FreeBSD Ping Stack-Based Overflow CVE-2022-23093

Background On Dec 01, 2022, a stack overflow vulnerability CVE-2022-23093 was found in the FreeBSD operating system (all supported versions) ping utility. The issue is a buffer overflow vulnerability affecting the “pr_pack()” function in ping(8). The flaw can be leveraged to cause a stack overflow, which could lead to a crash or trigger remote ...
Attackers Target Indian Banking Customers Via SMS and Fake Apps
Insights and Research
6 Min read

SMS scams trick Indian banking customers into installing malicious apps

Zscaler ThreatLabz researchers recently observed the rise of a sophisticated phishing campaign spreading via fake banking sites targeting big Indian banks like HDFC, AXIS, and SBI. The team will continue monitoring the emerging situation and will provide an update on any significant new developments. Previously, ThreatLabz researchers observed Indi...
Cyber honeycomb containing locks.
Insights and Research
8 Min read

Technical Analysis of DanaBot Obfuscation Techniques

Key Points DanaBot is a malware-as-a-service platform discovered in 2018 that is designed to steal sensitive information that may be used for wire fraud, conduct cryptocurrency theft, or perform espionage related activities The malware is heavily obfuscated which makes it very difficult and time consuming to reverse engineer and analy...

Explore More Topics