Zscaler Cloud Security Logo
Unternehmen > Blog

Neuheiten und Empfehlungen von Zscaler rund um die sichere digitale Transformation

Einblicke und Forschung
Job scams impersonate companies still hiring following tech layoffs
Einblicke und Forschung
5 Lesezeit: Min

Job scams impersonate companies still hiring following tech layoffs

Summary In the midst of significant layoffs hitting the previously immune tech industry, scammers have mobilized and doubled down on targeting job seekers with various employment scams. Stealing personal information and extorting victims for money, these scams leverage fake job postings, sites or portals, and forms, wrapped in social engineering...
""
Einblicke und Forschung
12 Lesezeit: Min

Album Stealer Targets Facebook Adult-Only Content Seekers

Information stealing malware is commonly observed in the landscape of cyber attacks today. Zscaler ThreatLabz team has discovered many new types of stealer malware families across different attack campaigns. Recently, the Zscaler ThreatLabz research team has spotted a new information stealer named Album. This blog will walk through the malware dist...
Over the shoulder shot of woman in a virtual meeting
Zscaler Cloud-Plattform
5 Lesezeit: Min

Here Comes the Hybrid Office—and It’s Going to Be a Nightmare for IT Leaders

As we move into a new phase of the pandemic, many companies are grappling with how to bring their employees back after more than two years of being untethered from the office. Survey after survey shows that most people want hybrid work arrangements—in-person and remote—and are quitting if not given the freedom to decide where they work. So, how...
Trade with caution - bad guys are stealing
Einblicke und Forschung
8 Lesezeit: Min

Trade with caution - bad guys are stealing

Threats continue to evolve in their complexity and scale as cyber criminals regularly come up with new ideas and find ways to target their victims. Modern information stealer families such as RedLine, RecordBreaker, ArkeiStealer, Vidar, Satacom, BatLoader are often sold through Malware-as-a-Service (MaaS) models and they continuously update wit...
Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization
Einblicke und Forschung
6 Lesezeit: Min

Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization

What happened in the Okta source code breach? Okta, a leading provider of authentication services and Identity and Access Management (IAM) solutions, confirmed that its private GitHub repositories were hacked this month. According to an email notification reported by BleepingComputer, and later confirmed by Okta security post, the incident invol...
FreeBSD Ping Stack-Based Overflow Security Advisory
Einblicke und Forschung
4 Lesezeit: Min

Security Advisory for FreeBSD Ping Stack-Based Overflow CVE-2022-23093

Background On Dec 01, 2022, a stack overflow vulnerability CVE-2022-23093 was found in the FreeBSD operating system (all supported versions) ping utility. The issue is a buffer overflow vulnerability affecting the “pr_pack()” function in ping(8). The flaw can be leveraged to cause a stack overflow, which could lead to a crash or trigger remote ...
Attackers Target Indian Banking Customers Via SMS and Fake Apps
Einblicke und Forschung
6 Lesezeit: Min

SMS scams trick Indian banking customers into installing malicious apps

Zscaler ThreatLabz researchers recently observed the rise of a sophisticated phishing campaign spreading via fake banking sites targeting big Indian banks like HDFC, AXIS, and SBI. The team will continue monitoring the emerging situation and will provide an update on any significant new developments. Previously, ThreatLabz researchers observed Indi...
Cyber honeycomb containing locks.
Einblicke und Forschung
8 Lesezeit: Min

Technical Analysis of DanaBot Obfuscation Techniques

Key Points DanaBot is a malware-as-a-service platform discovered in 2018 that is designed to steal sensitive information that may be used for wire fraud, conduct cryptocurrency theft, or perform espionage related activities The malware is heavily obfuscated which makes it very difficult and time consuming to reverse engineer and analy...
State of Zero Trust Transformation 2023
Einblicke und Forschung
4 Lesezeit: Min

Was Japan und Deutschland in Punkto Transformation gemeinsam haben – oder auch nicht

Meine erste Reise nach Japan seit Ausbruch der Pandemie hat mir die Augen geöffnet: Deutschland und Japan sind gar nicht so weit voneinander entfernt, wie es auf der Landkarte aussieht, wenn es um die digitale Transformation geht. Kultur und Tradition spielen in beiden Ländern eine entscheidende Rolle für Veränderungsprozesse. Ein Verständnis für d...
FIFA World Cup 2022 scams
Einblicke und Forschung
8 Lesezeit: Min

Surge of Fake FIFA World Cup Streaming Sites Targets Virtual Fans

Zscaler ThreatLabz is always on the lookout for threat actors trying to take advantage of major world news and events. The FIFA World Cup 2022 has brought with it a spike in cyber attacks targeting football fans through fake streaming sites and lottery scams, leveraging the rush and excitement around these uncommon events to infect users with malw...

Weitere Themen entdecken