Zscaler Cloud Security Logo
Unternehmen > Blog

Neuheiten und Empfehlungen von Zscaler rund um die sichere digitale Transformation

Hero Panel Image
Security Research
Job scams impersonate companies still hiring following tech layoffs
Einblicke und Forschung
5 Lesezeit: Min

Job scams impersonate companies still hiring following tech layoffs

Summary In the midst of significant layoffs hitting the previously immune tech industry, scammers have mobilized and doubled down on targeting job seekers with various employment scams. Stealing personal information and extorting victims for money, these scams leverage fake job postings, sites or portals, and forms, wrapped in social engineering...
""
Einblicke und Forschung
12 Lesezeit: Min

Album Stealer Targets Facebook Adult-Only Content Seekers

Information stealing malware is commonly observed in the landscape of cyber attacks today. Zscaler ThreatLabz team has discovered many new types of stealer malware families across different attack campaigns. Recently, the Zscaler ThreatLabz research team has spotted a new information stealer named Album. This blog will walk through the malware dist...
Trade with caution - bad guys are stealing
Einblicke und Forschung
8 Lesezeit: Min

Trade with caution - bad guys are stealing

Threats continue to evolve in their complexity and scale as cyber criminals regularly come up with new ideas and find ways to target their victims. Modern information stealer families such as RedLine, RecordBreaker, ArkeiStealer, Vidar, Satacom, BatLoader are often sold through Malware-as-a-Service (MaaS) models and they continuously update wit...
Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization
Einblicke und Forschung
6 Lesezeit: Min

Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization

What happened in the Okta source code breach? Okta, a leading provider of authentication services and Identity and Access Management (IAM) solutions, confirmed that its private GitHub repositories were hacked this month. According to an email notification reported by BleepingComputer, and later confirmed by Okta security post, the incident invol...
Ransomware hacker
Ransomware
5 Lesezeit: Min

Nokoyawa Ransomware: Rust or Bust

Key Points Nokoyawa is a 64-bit Windows-based ransomware family that emerged in February 2022 The threat group behind Nokoyawa performs double extortion ransomware attacks: exfiltrating sensitive information from organizations, followed by file encryption and a ransom payment demand Nokoyawa was initially written in the C programming lang...
FreeBSD Ping Stack-Based Overflow Security Advisory
Einblicke und Forschung
4 Lesezeit: Min

Security Advisory for FreeBSD Ping Stack-Based Overflow CVE-2022-23093

Background On Dec 01, 2022, a stack overflow vulnerability CVE-2022-23093 was found in the FreeBSD operating system (all supported versions) ping utility. The issue is a buffer overflow vulnerability affecting the “pr_pack()” function in ping(8). The flaw can be leveraged to cause a stack overflow, which could lead to a crash or trigger remote ...
Attackers Target Indian Banking Customers Via SMS and Fake Apps
Einblicke und Forschung
6 Lesezeit: Min

SMS scams trick Indian banking customers into installing malicious apps

Zscaler ThreatLabz researchers recently observed the rise of a sophisticated phishing campaign spreading via fake banking sites targeting big Indian banks like HDFC, AXIS, and SBI. The team will continue monitoring the emerging situation and will provide an update on any significant new developments. Previously, ThreatLabz researchers observed Indi...
Cyber honeycomb containing locks.
Einblicke und Forschung
8 Lesezeit: Min

Technical Analysis of DanaBot Obfuscation Techniques

Key Points DanaBot is a malware-as-a-service platform discovered in 2018 that is designed to steal sensitive information that may be used for wire fraud, conduct cryptocurrency theft, or perform espionage related activities The malware is heavily obfuscated which makes it very difficult and time consuming to reverse engineer and analy...
BlackBasta Hacker
Ransomware
7 Lesezeit: Min

Back in Black... Basta

Key Points BlackBasta emerged in February 2022 with double extortion ransomware attacks against organizations The threat group exfiltrates sensitive information from organizations before performing file encryption and demanding a ransom payment The previous version of BlackBasta shared many similarities to the now defunct Conti ransomware...
FIFA World Cup 2022 scams
Einblicke und Forschung
8 Lesezeit: Min

Surge of Fake FIFA World Cup Streaming Sites Targets Virtual Fans

Zscaler ThreatLabz is always on the lookout for threat actors trying to take advantage of major world news and events. The FIFA World Cup 2022 has brought with it a spike in cyber attacks targeting football fans through fake streaming sites and lottery scams, leveraging the rush and excitement around these uncommon events to infect users with malw...

Weitere Themen entdecken