Zscaler Cloud Security Logo
Unternehmen > Blog

Neuheiten und Empfehlungen von Zscaler rund um die sichere digitale Transformation

Weitere Blogs vom Autor

User-Profilbild Avinash Kumar

Avinash Kumar

Sr. Security Researcher II
SideWinder APT attack
Einblicke und Forschung
17 Lesezeit: Min

WarHawk: the New Backdoor in the Arsenal of the SideWinder APT Group

Recently, Zscaler ThreatLabz discovered a new malware being used by the SideWinder APT threat group in campaigns targeting Pakistan: a backdoor we’ve called “WarHawk.” SideWinder APT, aka Rattlesnake or T-APT4, is a susp...
Agent Tesla
Einblicke und Forschung
15 Lesezeit: Min

Agent Tesla RAT Delivered by Quantum Builder With New TTPs

Zscaler ThreatLabz has observed a campaign that delivers Agent Tesla, a .NET based keylogger and remote access trojan (RAT) active since 2014, using a builder named “Quantum Builder” sold on the dark web. This campaign f...
Lyceum .NET DNS Backdoor
Einblicke und Forschung
9 Lesezeit: Min

Lyceum .NET DNS Backdoor

Active since 2017, Lyceum group is a state-sponsored Iranian APT group that is known for targeting Middle Eastern organizations in the energy and telecommunication sectors and mostly relying on .NET based malwares. Z...
Stealer Targeting Social Media Platform Users
Einblicke und Forschung
12 Lesezeit: Min

FFDroider Stealer Targeting Social Media Platform Users

Introduction Credential stealing malware is commonly observed in the landscape of cyber attacks today. Zscaler ThreatLabz team has discovered many new types of stealer malwares across different attack campaigns. Steal...
Return of Emotet: Malware Analysis
Einblicke und Forschung
9 Lesezeit: Min

Return of Emotet: Malware Analysis

Key Points Emotet is a downloader malware used to download and execute additional modules and payloads. In January 2021, a law enforcement action disrupted the malware, its infrastructure, and some of its threat ...
Cyber security
Einblicke und Forschung
11 Lesezeit: Min

Squirrelwaffle: New Loader Delivering Cobalt Strike

Zscaler ThreatLabz has been following an emerging new malware loader known as Squirrelwaffle that is being used to deliver Cobalt Strike. In this blog, we will be analyzing the complete attack chain for this new malware ...
Spear Phishing attack
Einblicke und Forschung
7 Lesezeit: Min

Targeted Attack on Government Organizations Delivers Netwire RAT

The Zscaler ThreatLabz team has observed an interesting spear phishing campaign beginning July 2021 in which a threat actor is targeting a wide range of organizations in Pakistan. NetwiredRC is being used as the final pa...
Distributing malware through chat services
Einblicke und Forschung
10 Lesezeit: Min

Discord CDN: A Popular Choice for Hosting Malicious Payloads

Introduction Since the onset of the pandemic, the internet has become a central part of our lives. People of all ages turned online for school and work, to stream videos, to play video games, have virtual get-together...
Targeting WordPress Sites
Einblicke und Forschung
6 Lesezeit: Min

Malware Leveraging XML-RPC Vulnerability to Exploit WordPress Sites

We have written a number of blogs about vulnerabilities within and attacks on sites built with WordPress. And, when you consider that 34 percent of all websites in the world are built with WordPress, it’s understandable ...
Taurus: The New Stealer in Town
Einblicke und Forschung
6 Lesezeit: Min

Taurus: The New Stealer in Town

A sandbox is a valuable tool in the ongoing battle against cybercriminals and bad actors are continually looking for ways to avoid detection. One of the newest ones we observed, Taurus, includes techniques to evade sandb...
Multistaged Downloader Leverages Google Drive to Download Advanced Malware
Einblicke und Forschung
5 Lesezeit: Min

Multistaged Downloader Leverages Google Drive to Download Advanced Malware

Ever use Google Drive? Of course you have—you and approximately 1 billion other people. And it is estimated that those 1 billion users have loaded more than 2 trillion files on Google Drive. So, it’s a pretty big deal wh...
Malicious RTF document leading to NetwiredRC and Quasar RAT
Einblicke und Forschung
4 Lesezeit: Min

Malicious RTF document leading to NetwiredRC and Quasar RAT

Malware authors use a variety of clever methods to lure users into executing malicious documents. But the ThreatLabZ team recently observed a social engineering campaign with a unique approach. In these cases, malicious ...

Weitere Artikel

Weitere Artikel

Weitere Themen entdecken