Zscaler Cloud Security Logo
Unternehmen > Blog

Neuheiten und Empfehlungen von Zscaler rund um die sichere digitale Transformation

Einblicke und Forschung
Cyber honeycomb containing locks.
Einblicke und Forschung
7 Lesedauer: Min

Peeking into PrivateLoader

Key Points PrivateLoader is a downloader malware family that was first identified in early 2021 The loader’s primary purpose is to download and execute additional malware as part of a pay-per-install (PPI) malware distribution service PrivateLoader is used by multiple threat actors to distribute ransomware, information stealers, banking t...
Thailand pass delivers AsyncRAT campaign
Einblicke und Forschung
8 Lesedauer: Min

Targeted attack on Thailand Pass customers delivers AsyncRAT

The Zscaler ThreatLabz research team has recently discovered a malware campaign targeting users applying for Thailand travel passes. The end payload of many of these attacks is AsyncRAT, a Remote Access Trojan that can be used to monitor, control, and steal sensitive data from victims' machines. Thailand Pass is an online travel agency that brok...
Advanced Persistent Threats
Einblicke und Forschung
10 Lesedauer: Min

A "Naver"-ending game of Lazarus APT

Zscaler’s ThreatLabz research team has been closely monitoring a campaign targeting users in South Korea. This threat actor has been active for more than a year and continues to evolve its tactics, techniques, and procedures (TTPs); we believe with high confidence that the threat actor is associated with Lazarus Group, a sophisticated North Korean...
Zscaler ThreatLabz Discovers Multiple Product Bugs in Adobe Acrobat
Einblicke und Forschung
3 Lesedauer: Min

Zscaler ThreatLabz Discovers Multiple Product Bugs in Adobe Acrobat

In April 2022, Adobe released security update APSB22-16. This update fixed five product bugs that Zscaler’s ThreatLabz reported in Adobe Acrobat that are related to EMF (Enhanced Metafile Format) parsing. Adobe determined that Acrobat is secure by default for converting EMF to PDF. Specifically, abuse requires administrative privileges to modify th...
2022 ThreatLabz Phishing Report
Einblicke und Forschung
6 Lesedauer: Min

Uncovering new techniques and phishing attack trends from the cloud

Download your free copy of the 2022 ThreatLabz Phishing Report, and check out our infographic. For decades, phishing has been a complex and time-consuming challenge for every security team. As the findings of the ThreatLabz 2022 Phishing Report reveal, the challenge is getting harder: adversaries are getting craftier, and attackers are growing i...
Sandworm CyberBlink attack
Einblicke und Forschung
5 Lesedauer: Min

The Latest Sandworm Botnet Attack Shows Why Firewalls Can’t Do Zero Trust

US Attorney General Merrick Garland announced Wednesday that US officials have disrupted a two-tiered global botnet of thousands of infected firewall devices allegedly controlled by the threat actor called Sandworm, who have been previously connected to the Main Intelligence Directorate of the General Staff of the Armed Forces of the Russian Federa...
Cloud computing
Einblicke und Forschung
5 Lesedauer: Min

The Top 5 Benefits of a Cloud-Native Application Protection Platform (CNAPP)

CNAPP platforms help an enterprise integrate security principles and standards across the development lifecycle by implementing security controls at each stage—development, integration, deployment, and production operations. CNAPP can be used to consolidate security tools while providing increased visibility into enterprise workloads and control o...
Stealer Targeting Social Media Platform Users
Einblicke und Forschung
12 Lesedauer: Min

FFDroider Stealer Targeting Social Media Platform Users

Introduction Credential stealing malware is commonly observed in the landscape of cyber attacks today. Zscaler ThreatLabz team has discovered many new types of stealer malwares across different attack campaigns. Stealers are malicious programs that threat actors use to collect sensitive information with various techniques including keylogging, c...
Spring Cloud Framework Vulnerabilities
Einblicke und Forschung
5 Lesedauer: Min

Analysis of Spring Cloud Framework Vulnerabilities

Background: Over the past few days, the Zscaler ThreatLabz team has been closely monitoring the reports of potential RCEs in Spring Cloud Framework and Spring Cloud Function. Spring is an open-source lightweight Java platform which many developers use as their application development framework. As part of the Spring echo system, Spring Cloud ...
BlackGuard Stealer
Einblicke und Forschung
5 Lesedauer: Min

Analysis of BlackGuard - A New Info Stealer Malware Being Sold In A Russian Hacking Forum

Introduction: Hacking forums often double up as underground marketplaces where cybercriminals buy, rent, and sell all kinds of malicious illegal products, including software, trojans, stealers, exploits, and leaked credentials. Malware-as-a-service has contributed substantially to the growth of ransomware and phishing attacks (among other attack...

Weitere Themen entdecken