Zscaler Cloud Security Logo
Unternehmen > Blog

Neuheiten und Empfehlungen von Zscaler rund um die sichere digitale Transformation

Hero Panel Image
Security Research
Return of Emotet malware
Einblicke und Forschung
1 Lesedauer: Min

Return of Emotet malware

Key Points Emotet is one of the most dangerous, prolific, and long-lasting malware Trojans that has ever existed. In January 2021, a law enforcement action disrupted the Emotet malware and its infrastructure. It also led to the arrest of some of the threat actors involved with the malware. After almost a year-long hiatus, Emotet has retur...
Deception Engineering
Einblicke und Forschung
7 Lesedauer: Min

Deception Engineering

Introduction One skill that the Zscaler Deception team has become really good at is analyzing adversary tactics, techniques, and toolsets and hypothesizing how we could disrupt the adversary playbook with deception. What we want to talk about today is a concept we like to internally call “Deception Engineering”. It’s a wordplay on Detect...
Cyber honeycomb containing locks.
Einblicke und Forschung
5 Lesedauer: Min

Spike in DanaBot Malware Activity

Key Points Two large software supply chain attacks distributed the DanaBot malware. DanaBot is a malware-as-a-service platform discovered in 2018 that focuses on credential theft and banking fraud. DanaBot’s popularity has waned in recent years, but these campaigns may signal a return of the malware and its affiliates to the threat landsc...
Phishing
Einblicke und Forschung
5 Lesedauer: Min

How a Phishing Campaign Targeting Indian Banking Users is Distributing an SMS Stealer

Scammers are always coming up with new, more sophisticated social engineering techniques to collect user credentials for financial benefit. However, when it comes to banking websites, capturing login credentials via a phishing campaign often isn’t enough for cybercriminals. Due to the implementation of two-factor authentication by most banking s...
Encrypted attacks rise 314%
Einblicke und Forschung
4 Lesedauer: Min

Encrypted Attacks Rise 314%

The Zscaler Zero Trust Exchange is built on the world’s largest security cloud, which brokers over 190 billion daily transactions (that’s roughly 50x the number of daily Google searches), and extracts over 300 trillion signals each day. The ThreatLabz research team analyzes this massive data set to monitor threats, improve security controls, and to...
Multiloginbot stealing the data and sending it to malware author via chat service.
Einblicke und Forschung
6 Lesedauer: Min

New MultiloginBot Phishing Campaign

Multilogin is an application designed to make it easier to log into multiple accounts on a single website or platform simultaneously. Recently, Zscaler ThreatLabz has come across a live phishing campaign that is targeting genuine Multilogin users by tricking the users into downloading a malicious installer. The installer is hosted on newly register...
IoT traffic spying
Einblicke und Forschung
4 Lesedauer: Min

New Insights: Is China watching your IoT traffic?

To add insult to injury, the Internet of Things (IoT) doesn’t just have notoriously poor security, the connected devices are now front and center in the fallout of critical control systems. These days, everyone is taking notice…or maybe not. In July 2021, the White House warned that if the Russian government didn’t take action against ransomware...
ransomware
Ransomware
3 Lesedauer: Min

AtomSilo Ransomware Enters the League of Double Extortion

Ransomware is used widely in cyberattacks to disrupt the victim's organization. Over the last two years, many attackers have evolved their ransomware tactics to include data exfiltration. This tactic is known as "double-extortion": attackers demand ransom for the data decryption in addition to the ransom to prevent public release of the stolen data...
Neue TrickBot- und BazarLoader-Kampagnen nutzen mehrere Übertragungsvektoren
Einblicke und Forschung
6 Lesedauer: Min

Neue TrickBot- und BazarLoader-Kampagnen nutzen mehrere Übertragungsvektoren

Das Forschungsteam von Zscaler ThreatLabz überwacht täglich Tausende von Dateien, die neue und häufigste Bedrohungen verfolgen, einschließlich eines der bekanntesten Banktrojaner der letzten fünf Jahre: TrickBot. TrickBot ist seit 2016 aktiv und steht in Verbindung mit einer Vielzahl bösartiger Kampagnen, die Bitcoin-Mining und den Diebstahl von Ba...
Cyber security
Einblicke und Forschung
11 Lesedauer: Min

Squirrelwaffle: New Loader Delivering Cobalt Strike

Zscaler ThreatLabz has been following an emerging new malware loader known as Squirrelwaffle that is being used to deliver Cobalt Strike. In this blog, we will be analyzing the complete attack chain for this new malware family (as shown in Figure 1). This campaign has been running since mid-September 2021. The Squirrelwaffle loader is being deliver...

Weitere Themen entdecken