Zscaler Cloud-Sicherheitslogo
Unternehmen > Blog

Neuheiten und Empfehlungen von Zscaler rund um die sichere digitale Transformation

Ransomware
Nevada ransomware
Ransomware
6 Lesezeit: Min

Nevada Ransomware: Yet Another Nokayawa Variant

Key Points Nevada ransomware was advertised in criminal forums in December 2022 as part of a new ransomware-as-a-service affiliate program Nevada is written in the Rust programming language with support for Linux and 64-bit versions of Windows Zscaler ThreatLabz has identified significant code similarities between Nevada and Nokoyawa ran...
Ransomware hacker
Ransomware
5 Lesezeit: Min

Nokoyawa Ransomware: Rust or Bust

Key Points Nokoyawa is a 64-bit Windows-based ransomware family that emerged in February 2022 The threat group behind Nokoyawa performs double extortion ransomware attacks: exfiltrating sensitive information from organizations, followed by file encryption and a ransom payment demand Nokoyawa was initially written in the C programming lang...
BlackBasta Hacker
Ransomware
7 Lesezeit: Min

Back in Black... Basta

Key Points BlackBasta emerged in February 2022 with double extortion ransomware attacks against organizations The threat group exfiltrates sensitive information from organizations before performing file encryption and demanding a ransom payment The previous version of BlackBasta shared many similarities to the now defunct Conti ransomware...
ThreatLabz-Report 2022 zur aktuellen Ransomware-Lage
Ransomware
6 Lesezeit: Min

ThreatLabz-Report 2022 zur aktuellen Ransomware-Lage

Ransomware-Angriffe nahmen im Zeitraum zwischen Februar 2021 und März 2022 um weitere 80 % zu. Das ergab eine Analyse aller in der Zscaler Cloud beobachteten Ransomware-Payloads. Ein noch stärkerer Zuwachs von 117 % im Vergleich zum Vorjahr wurde bei Angriffen mit Doppelerpressung verzeichnet, d. h. geschäftskritische Daten werden vor der Verschlüs...
Cyber honeycomb containing locks.
Einblicke und Forschung
7 Lesezeit: Min

Peeking into PrivateLoader

Key Points PrivateLoader is a downloader malware family that was first identified in early 2021 The loader’s primary purpose is to download and execute additional malware as part of a pay-per-install (PPI) malware distribution service PrivateLoader is used by multiple threat actors to distribute ransomware, information stealers, banking t...
A digital screen with compromised code
Ransomware
4 Lesezeit: Min

What You Need to Know About the LAPSUS$ Supply Chain Attacks

Join the ThreatLabz research team and our product experts on Tuesday, 3/29/22 at 9:30am PT for an analysis of the LAPSUS$ Okta attack and strategies for assessing and reducing the impact to your organization. The extortion threat group LAPSUS$ arrived on threat researchers' radar back in December 2021, with a burst of erratic attacks that repres...
Tracing the Evolution of Thanos Ransomware Variants
Einblicke und Forschung
12 Lesezeit: Min

Midas Ransomware: Tracing the Evolution of Thanos Ransomware Variants

Key Takeaways: An in-depth analysis of Midas and trends across other Thanos ransomware variants reveals how ransomware groups shifted tactics in 2021 to: lower sunk costs by using RaaS builders to reduce development time increase payouts with double extortion tactics by using their own data leak sites extend the length and effectiveness o...
A person explaining something in a meeting
Ransomware
4 Lesezeit: Min

Understanding the Assignment: Defending Against Ransomware

The education industry has unceremoniously emerged as the second most common target for ransomware. In 2020, at least 1,681 schools, colleges, and universities of all sizes and prestige were infected. Institutions face the difficult challenge of preserving academic freedom, easy access to information, and open collaboration while defending from thr...
Ransomware hacker
Ransomware
4 Lesezeit: Min

Technical Analysis of PartyTicket Ransomware

Key Points PartyTicket is an unsophisticated and poorly designed ransomware family that is likely intended to be a diversion from the Hermetic wiper attack The ransomware generates a single AES key that is used to encrypt targeted files in GCM mode Files can be decrypted without having access to the RSA private key because the AES key is ...
Return of Emotet: Malware Analysis
Einblicke und Forschung
9 Lesezeit: Min

Return of Emotet: Malware Analysis

Key Points Emotet is a downloader malware used to download and execute additional modules and payloads. In January 2021, a law enforcement action disrupted the malware, its infrastructure, and some of its threat actors. After almost a year-long hiatus, Emotet returned to the threat landscape in November 2021. Emotet modules focus on cre...

Weitere Themen entdecken