Zscaler Cloud Security Logo
Unternehmen > Blog

Neuheiten und Empfehlungen von Zscaler rund um die sichere digitale Transformation

Hero Panel Image
Security Research
Cyber honeycomb containing locks.
Einblicke und Forschung
7 Lesedauer: Min

Peeking into PrivateLoader

Key Points PrivateLoader is a downloader malware family that was first identified in early 2021 The loader’s primary purpose is to download and execute additional malware as part of a pay-per-install (PPI) malware distribution service PrivateLoader is used by multiple threat actors to distribute ransomware, information stealers, banking t...
Thailand pass delivers AsyncRAT campaign
Einblicke und Forschung
8 Lesedauer: Min

Targeted attack on Thailand Pass customers delivers AsyncRAT

The Zscaler ThreatLabz research team has recently discovered a malware campaign targeting users applying for Thailand travel passes. The end payload of many of these attacks is AsyncRAT, a Remote Access Trojan that can be used to monitor, control, and steal sensitive data from victims' machines. Thailand Pass is an online travel agency that brok...
Advanced Persistent Threats
Einblicke und Forschung
10 Lesedauer: Min

A "Naver"-ending game of Lazarus APT

Zscaler’s ThreatLabz research team has been closely monitoring a campaign targeting users in South Korea. This threat actor has been active for more than a year and continues to evolve its tactics, techniques, and procedures (TTPs); we believe with high confidence that the threat actor is associated with Lazarus Group, a sophisticated North Korean...
Zscaler ThreatLabz Discovers Multiple Product Bugs in Adobe Acrobat
Einblicke und Forschung
3 Lesedauer: Min

Zscaler ThreatLabz Discovers Multiple Product Bugs in Adobe Acrobat

In April 2022, Adobe released security update APSB22-16. This update fixed five product bugs that Zscaler’s ThreatLabz reported in Adobe Acrobat that are related to EMF (Enhanced Metafile Format) parsing. Adobe determined that Acrobat is secure by default for converting EMF to PDF. Specifically, abuse requires administrative privileges to modify th...
2022 ThreatLabz Phishing Report
Einblicke und Forschung
6 Lesedauer: Min

Uncovering new techniques and phishing attack trends from the cloud

Download your free copy of the 2022 ThreatLabz Phishing Report, and check out our infographic. For decades, phishing has been a complex and time-consuming challenge for every security team. As the findings of the ThreatLabz 2022 Phishing Report reveal, the challenge is getting harder: adversaries are getting craftier, and attackers are growing i...
Stealer Targeting Social Media Platform Users
Einblicke und Forschung
12 Lesedauer: Min

FFDroider Stealer Targeting Social Media Platform Users

Introduction Credential stealing malware is commonly observed in the landscape of cyber attacks today. Zscaler ThreatLabz team has discovered many new types of stealer malwares across different attack campaigns. Stealers are malicious programs that threat actors use to collect sensitive information with various techniques including keylogging, c...
Spring Cloud Framework Vulnerabilities
Einblicke und Forschung
5 Lesedauer: Min

Analysis of Spring Cloud Framework Vulnerabilities

Background: Over the past few days, the Zscaler ThreatLabz team has been closely monitoring the reports of potential RCEs in Spring Cloud Framework and Spring Cloud Function. Spring is an open-source lightweight Java platform which many developers use as their application development framework. As part of the Spring echo system, Spring Cloud ...
BlackGuard Stealer
Einblicke und Forschung
5 Lesedauer: Min

Analysis of BlackGuard - A New Info Stealer Malware Being Sold In A Russian Hacking Forum

Introduction: Hacking forums often double up as underground marketplaces where cybercriminals buy, rent, and sell all kinds of malicious illegal products, including software, trojans, stealers, exploits, and leaked credentials. Malware-as-a-service has contributed substantially to the growth of ransomware and phishing attacks (among other attack...
Ransomware
Einblicke und Forschung
8 Lesedauer: Min

Conti Ransomware Attacks Persist With an Updated Version Despite Leaks

In late January 2022, ThreatLabz identified an updated version of Conti ransomware as part of the global ransomware tracking efforts. This update was released prior to the massive leak of Conti source code and chat logs on Februrary 27, 2022. The leaks were published by a Ukrainian researcher after the invasion of Ukraine. However, since these leak...
ThreatLabz Security Advisory
Einblicke und Forschung
5 Lesedauer: Min

Lapsus$ Attack on Okta: How to Evaluate the Impact to your Organization

Microsoft and Okta disclosed breaches this week involving Lapsus$, a cybercrime group that has made headlines multiple times in recent months for attacks against corporations including NVIDIA, Ubisoft, Samsung, and Vodafone. The group specializes in stealing and extorting data in exchange for a ransom payment. Lapsus$ is known to leverage low-tech ...

Weitere Themen entdecken