Empresa > Blog

Noticias y puntos de vista de la voz líder en transformación digital segura

Blogs escritos por este autor

Foto de perfil del usuario Deepen Desai

Deepen Desai

CISO and VP Security Research As Chief Information Security Officer & VP Security Research, Deepen Desai is responsible for global security research operations and working with product teams to ensure that the Zscaler platform and services are secure. Deepen has been a cybersecurity leader for 15 years, with seven of those years at Dell SonicWALL.
Las empresas evalúan el riesgo a la luz de las nuevas tendencias de phishing y los hallazgos del Informe de phishing de ThreatLabz 2023
Investigación de Threatlabz
2 Min de lectura

El informe de phishing 2023 revela un aumento del 47,2 % en los ataques de phishing el año pasado

Los ataques de phishing siguen siendo una de las amenazas más importantes a las que se enfrentan las organizaciones en la actualidad. A medida que las empresas confían cada vez más en los canales de comunicación digital,...
ThreatLabz 2022 Cloud Security Report exposes your risk.
Investigación de Threatlabz
10 Min de lectura

2022 Cloud (In)Security Report

The convenience and ease of public cloud technology have changed our world, enabling scalable business operations, work-from-anywhere, and increased productivity everywhere. As public cloud adoption continues to accelera...
13 Reasons Why Cyber Crime Isn’t Slowing Down Any Time Soon
Arquitectura de confianza cero
10 Min de lectura

13 Reasons Why Cybercrime Isn’t Slowing Down Any Time Soon

2022 was characterized by global risks from population pressures and climate change to political conflicts and industrial supply chain challenges. Cybercriminals used this turmoil to exploit these trending topics includi...
Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization
Información de seguridad
6 Min de lectura

Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization

What happened in the Okta source code breach? Okta, a leading provider of authentication services and Identity and Access Management (IAM) solutions, confirmed that its private GitHub repositories were hacked this mon...
Informe sobre el estado del ransomware de ThreatLabz 2022
Ransomware
6 Min de lectura

Informe sobre el estado del ransomware de ThreatLabz 2022

Los ataques de ransomware aumentaron otro 80 % entre febrero de 2021 y marzo de 2022, según un análisis de las cargas útiles de ransomware vistas en la nube de Zscaler. Los ataques de doble extorsión, que incluyen la exf...
ThreatLabz Security Advisory
Información de seguridad
5 Min de lectura

Lapsus$ Attack on Okta: How to Evaluate the Impact to your Organization

Microsoft and Okta disclosed breaches this week involving Lapsus$, a cybercrime group that has made headlines multiple times in recent months for attacks against corporations including NVIDIA, Ubisoft, Samsung, and Vodaf...
ThreatLabz security advisory
Información de seguridad
6 Min de lectura

ThreatLabz Security Advisory: Cyberattacks Stemming from the Russia-Ukraine Conflict [Updated: March 21, 2022]

Updated Security Advisory - March 21, 2022 Earlier today, US President Joe Biden issued a statement warning of the potential for malicious cyber conduct against the United States as a response to economic sanctions ag...
Ukraine targeted attacks
Información de seguridad
11 Min de lectura

HermeticWiper & resurgence of targeted attacks on Ukraine

Summary Since Jan 2022, ThreatLabz has observed a resurgence in targeted attack activity against Ukraine. We identified two attack-chains in the timeframe - Jan to Feb 2022, which we attribute to the same threat actor...
Cybersecurity Lessons to Carry Into 2022
Información de seguridad
4 Min de lectura

Cybersecurity Lessons to Carry Into 2022

The end of the year is a time for reflection. In the world of cybersecurity, that means looking back at how the threat landscape has evolved and what changes we can make to better prepare for the year ahead. ThreatLabz m...
Return of Emotet malware
Información de seguridad
3 Min de lectura

Return of Emotet malware

Key Points Emotet is one of the most dangerous, prolific, and long-lasting malware Trojans that has ever existed. In January 2021, a law enforcement action disrupted the Emotet malware and its infrastructure. It ...
Encrypted attacks rise 314%
Información de seguridad
4 Min de lectura

Encrypted Attacks Rise 314%

The Zscaler Zero Trust Exchange is built on the world’s largest security cloud, which brokers over 190 billion daily transactions (that’s roughly 50x the number of daily Google searches), and extracts over 300 trillion s...
woman glasses
Ransomware
5 Min de lectura

Active Defense Strategies for Kaseya-style Ransomware Attacks

The recent Kaseya ransomware incident combined the worst possibilities the infosec community has had to contend with in recent months: A supply-chain attack Ransomware An unpatched application vulnerability (ze...
threats
Información de seguridad
3 Min de lectura

ThreatLabZ June 2021 Report: Deconstructing Kaseya Supply-Chain Attack and the Minebridge RAT Campaign

This post also appeared on the CXO REvolutionaries site. Read more here. With the petabytes of daily data transactions it secures, the Zscaler ThreatLabZ security research team has a unique view of the latest cybersec...
ransomware-attack-notification
Ransomware
2 Min de lectura

ThreatLabZ Ransomware Review: The Advent of Double Extortion

The recent ransomware attack on the Colonial Pipeline abruptly halted operations on the largest refined products pipeline in the United States, impacting fuel availability across the eastern half of the country. In this ...
ThreatLabZ predictions
Información de seguridad
5 Min de lectura

Cybersecurity Past, Present, and Future: ThreatLabZ Looks at 2020 and the Year Ahead

Welcome to the end of 2020. The close of every year brings a lot of online activity—especially now, with everyone at home and socially distancing. Unfortunately, even as people stay at home to protect themselves, they ar...
lock
Información de seguridad
15 Min de lectura

The 2020 State of Cloud (In)Security

Key findings 63% do not use multifactor authentication for cloud access 50% do not rotate access keys periodically 92% do not log access to cloud storage, eliminating the ability to conduct forensic analysis of...
SSL threats
Información de seguridad
4 Min de lectura

2020: The State of Encrypted Attacks

This blog is an overview of the latest threat research conducted by ThreatLabZ, Zscaler’s security research team. The full report is available here. While SSL/TLS encryption is the industry standard for protecting dat...
30,000 Percent Increase in COVID-19-Themed Attacks
Información de seguridad
6 Min de lectura

30,000 Percent Increase in COVID-19-Themed Attacks

No, that is not a typo. Since January, we have seen an increase of 30,000% in phishing, malicious websites, and malware targeting remote users—all related to COVID-19. In January, we saw (and blocked) 1,200 such attacks....
Shining a Light on Shadow IoT to Protect Your Organization
Información de seguridad
5 Min de lectura

Shining a Light on Shadow IoT to Protect Your Organization

The Zscaler ThreatLabZ team released new research today (IoT in the Enterprise 2020: Shadow IoT Emerges as a Security Threat) that finds shadow IoT devices and traffic are quickly growing in organizations and posing many...
Critical Windows Update - CryptoAPI Spoofing, Windows Remote Desktop vulnerabilities
Información de seguridad
2 Min de lectura

Critical Windows Update - CryptoAPI Spoofing, Windows Remote Desktop vulnerabilities

Background Earlier today Microsoft released several security updates as part of its regular monthly updates known as Patch Tuesday. Some of the issues that were patched in today's update are critical and has prompted an...
2020s: An IoT Bonanza
Arquitectura de confianza cero
2 Min de lectura

2020s: An IoT Bonanza

We invited several leaders from Zscaler to comment on changes they anticipate in the decade ahead. This statement was submitted by Deepen Desai, Zscaler Vice President of Security Research and Operations. According ...
IoT traffic in the enterprise is rising. So are the threats.
Información de seguridad
5 Min de lectura

IoT traffic in the enterprise is rising. So are the threats.

Do you know exactly what IoT devices are on your network and how active they are? You’d better, because they might be opening the door to cybercrime. IoT devices are, of course, nonstandard computing devices that conn...
Critical Update: Windows Remote Desktop Services Vulnerability
Información de seguridad
2 Min de lectura

Critical Update: Windows Remote Desktop Services Vulnerability

Background Earlier today Microsoft released several security updates as part of its regular monthly updates known as Patch Tuesday. One of the issues that was patched in today's update, CVE-2019-0708, is critical, a...
Working together to understand the threat landscape
Información de seguridad
3 Min de lectura

Working together to understand the threat landscape

As a society, we are more connected than ever before. Our community is no longer just the people living nearby. It is now a global community, made up of disparate individuals connected not by proximity but by the interne...
What’s hiding in encrypted traffic? Millions of advanced threats.
Información de seguridad
3 Min de lectura

What’s hiding in encrypted traffic? Millions of advanced threats.

Once seen as the ultimate protection for data being transmitted over the internet, encryption has become a vast playground for cybercriminals. Zscaler ThreatLabZ, the research organization at Zscaler, analyzed the enc...
The Top 10 ThreatLabZ blogs from 2018
Información de seguridad
3 Min de lectura

The Top 10 ThreatLabZ blogs from 2018

The Zscaler ThreatLabZ team is continually hunting new threats, analyzing them, and sharing their findings in blogs and reports on the Zscaler site. What follows are the most read and shared blogs of 2018. Androi...
2019 Will See Cybercriminals Eye Opportunities in Cryptocurrency and IoT to Launch Their Attacks
Información de seguridad
5 Min de lectura

2019 Will See Cybercriminals Eye Opportunities in Cryptocuin 2019

Cybercriminals never take vacations. They’re always scanning the horizon to see which new technologies are being adopted by legitimate enterprises and are therefore ripe to be exploited, or how to utilize trusted protoco...
Cyber Monday: The biggest day for cyberattacks? Not by a long shot.
Información de seguridad
4 Min de lectura

Cyber Monday: The biggest day for cyberattacks? Not by a long shot.

Last week, the Zscaler ThreatLabZ research team did an analysis of phishing attacks we’ve come across in our cloud leading up to Black Friday and Cyber Monday. The team had been seeing an increase in a variety of phishin...
Zscaler ThreatLabZ Phishing Roundup
Información de seguridad
7 Min de lectura

Zscaler ThreatLabZ Phishing Roundup

Phishing is an attempt to steal personally identifiable information, such as Social Security numbers, credit card details, date of birth, and other sensitive data. Typically, phishing targets a user with an email contain...
Cryptomining is here to stay in the enterprise
Información de seguridad
8 Min de lectura

Cryptomining is here to stay in the enterprise

After Bitcoin hit highs above $19,000 in December, cryptocurrency has received even more attention as speculation about the currency continues. It should be no surprise then that there has been a rise in cryptomining ac...
February 2018 Zscaler SSL Threat Report
Información de seguridad
4 Min de lectura

February 2018 Zscaler SSL Threat Report

SSL was introduced in 1994 and TLS in 1999 in response to growing concerns on the security of data being transmitted over the internet. However, the very protocol that was heralded as the ultimate cyber guard has ironica...
Meltdown and Spectre vulnerabilities: What you need to know
Información de seguridad
5 Min de lectura

Meltdown and Spectre vulnerabilities: What you need to know

Two major security vulnerabilities in processors, dubbed Meltdown and Spectre, were disclosed earlier this week by Google's Project Zero team. With the ability to allow attackers to gain unauthorized access to sensit...
Bad Rabbit – A new Petya ransomware variant
Ransomware
3 Min de lectura

Bad Rabbit – A new Petya ransomware variant

Please join our webcast for additional details regarding this attack. Updated - October 25, 2017 Introduction Almost four months after the last major outbreak, we are seeing a new variant of Petya ransomware dub...
CCleaner Compromise: Yet another software supply-chain attack
Información de seguridad
2 Min de lectura

CCleaner Compromise: Yet another software supply-chain attack

Earlier this week, Avast, a multinational security software vendor, reported a compromise of their Windows system utility CCleaner. CCleaner is a very popular file system and registry clean up utility that optimizes perf...
Cobian RAT – A backdoored RAT
Información de seguridad
5 Min de lectura

Cobian RAT – A backdoored RAT

Introduction The Zscaler ThreatLabZ research team has been monitoring a new remote access Trojan (RAT) family called Cobian RAT since February 2017. The RAT builder for this family was first advertised on multiple und...
SSL/TLS-based malware attacks
Información de seguridad
3 Min de lectura

SSL/TLS-based malware attacks

Whether you call it SSL, TLS, or HTTPS, you’re talking about what has become the single greatest means for harboring the transmission of malware: encryption. Zscaler operates a globally distributed cloud security pla...
UPDATE: Petya Ransomware Outbreak
Ransomware
4 Min de lectura

UPDATE: Petya Ransomware Outbreak

One month after the WannaCry outbreak, we have seen another widespread ransomware outbreak, possibly involving the Petya ransomware family variant. The initial vector has been confirmed to be a compromised software updat...
WannaCry 2.0 ransomware attacks continue...
Ransomware
5 Min de lectura

WannaCry 2.0 ransomware attacks continue...

Introduction An aggressive ransomware campaign went viral on May 12, 2017, that impacted over 200,000 systems worldwide and the attack remains active. The use of the leaked NSA "ETERNALBLUE" SMB exploit by the dropper...
WannaCry ransomware. What you need to know.
Ransomware
2 Min de lectura

WannaCry ransomware. What you need to know.

On 12 May 2017, a massive ransomware attack was unleashed and it disrupted business operations for public and private organizations on multiple continents. The ransomware is highly virulent and once a user is infected, i...
Google Docs Phishing Campaign
Información de seguridad
2 Min de lectura

Google Docs Phishing Campaign

Introduction An aggressive phishing campaign went viral earlier today that impacted multiple Google Mail users, including those in enterprise Google deployments. The campaign involved unsuspecting users receiving an e...
IoT devices in the enterprise
Información de seguridad
9 Min de lectura

IoT devices in the enterprise

In the months prior to the recent attacks, which used Internet of things (IoT) devices to carry out massive distributed-denial-of-service (DDoS) attacks, the ThreatLabZ research team had begun studying the use of IoT dev...
Agent Tesla Keylogger delivered using cybersquatting
Información de seguridad
4 Min de lectura

Agent Tesla Keylogger delivered using cybersquatting

Introduction Zscaler ThreatLabZ recently came across an attack chain in which cybersquatting was being used to deliver a commercial keylogger, called “AgentTesla,” with an intent to steal confidential information. The...
The three reasons I go to Black Hat, year after year.
Eventos
3 Min de lectura

The three reasons I go to Black Hat, year after year.

Most people who go to Las Vegas arrive with a singularity of purpose. For many, it’s the betting. For some, it’s Cirque de Soleil and other shows. For the InfoSec community around the world, Vegas in early August is all ...
Malicious Documents leveraging new Anti-VM & Anti-Sandbox techniques
Información de seguridad
4 Min de lectura

Malicious Documents leveraging new Anti-VM & Anti-Sandbox techniques

Introduction Zscaler ThreatLabZ recently came across a new wave of malicious documents evading automated analysis systems using a new technique. Malicious executables that leverage numerous techniques to detect the vi...
New Infostealer Trojan uses Fiddler Proxy & Json.NET
Información de seguridad
5 Min de lectura

New Infostealer Trojan uses Fiddler Proxy & Json.NET

Introduction Zscaler ThreatLabZ came across a new Infostealer Trojan written in .NET that utilizes popular tools like Fiddler & Json.NET for its operation. In April, the new Infostealer family of Spanish origin was ...
New Spy Banker Trojan Telax Abusing Google Cloud Servers
Información de seguridad
6 Min de lectura

New Spy Banker Trojan Telax Abusing Google Cloud Servers

Introduction Zscaler ThreatLabZ has been closely monitoring a new Spy Banker Trojan campaign that has been targeting Portuguese-speaking users in Brazil. The malware authors are leveraging Google Cloud Servers to host...
Chinese Backdoor Zegost Delivered Via Hacking Team Exploit
Información de seguridad
4 Min de lectura

Chinese Backdoor Zegost Delivered Via Hacking Team Exploit

Introduction Zscaler ThreatLabZ has been closely monitoring the usage of Hacking Team's leaked exploits in the wild since July, 2015 and recently uncovered the Emissary Panda APT attack leveraging these exploits. In p...
Chinese Cyber Espionage APT Group ‘Emissary Panda’ Activity Update
Información de seguridad
2 Min de lectura

Chinese Cyber Espionage APT Group ‘Emissary Panda’ Activity Update

Introduction Last week we shared research on the Chinese cyber espionage APT group ‘Emissary Panda’ and how the group is for the first time leveraging Hacking Team’s leaked exploits to target a multinational financia...
Chinese Cyber Espionage APT Group Leveraging Recently Leaked Hacking Team Exploits To Target A Financial Services Firm
Información de seguridad
5 Min de lectura

Chinese Cyber Espionage APT Group Leveraging Recently Leaked Hacking Team Exploits To Target A Financial Services Firm

Introduction As predicted following the leak of Hacking Team exploit codes covered here, the Zscaler security research team has recently started seeing a Chinese cyber espionage group weaponizing malware payloads us...
Hacking Team Leak, Flash 0day, Exploit Payloads And More
Información de seguridad
4 Min de lectura

Hacking Team Leak, Flash 0day, Exploit Payloads And More

[Update - July 13, 2015] In addition to the Flash 0day exploit that we reported earlier [CVE-2015-5119], two new Flash 0day exploits were found in the Hacking Team's leaked data and these flaws are not yet patched: ...
Signed CryptoWall 3.0 Variant Delivered Via MediaFire
Información de seguridad
4 Min de lectura

Signed CryptoWall 3.0 Variant Delivered Via MediaFire

Introduction Ransomware has evolved immensely over the past few years, with CryptoLocker being the ground breaking strain reaping huge profits for cybercriminals. According to a report in December 2013, the CryptoLock...
Malvertising, Exploit Kits, ClickFraud & Ransomware: A Thriving Underground Economy
Ransomware
13 Min de lectura

Malvertising, Exploit Kits, ClickFraud & Ransomware: A Thriving Underground Economy

Malvertising Malvertising involves using malicious online advertisements as a means to serve malware payloads to unsuspecting users. Cybercriminals leverage compromised advertising networks to serve malicious advertis...
NjRAT & H-Worm Variant Infections Continue To Rise
Información de seguridad
5 Min de lectura

NjRAT & H-Worm Variant Infections Continue To Rise

Introduction njRAT Trojan also known as Bladabindi, is a Remote Access Tool (RAT) that was first seen in 2013 and has been extremely prevalent in the Middle Eastern region. njRAT was developed using Microsoft's...
Malvertising Leading To Flash Zero Day Via Angler Exploit Kit
Información de seguridad
4 Min de lectura

Malvertising Leading To Flash Zero Day Via Angler Exploit Kit

UPDATE [01/25/2015]: Adobe released an update yesterday (APSA15-01) for CVE-2015-0311 that fixes the zero day exploit mentioned in this blog. Given the number of exploit attempts we are seeing for this vulnerability in...
Evolution Of Upatre Trojan Downloader
Información de seguridad
3 Min de lectura

Evolution Of Upatre Trojan Downloader

Background Upatre is a Trojan Downloader family that once installed, is responsible for stealing information and downloading additional malware onto the victim machine. It typically arrives via spammed e-mail messages...
Analysis Of SandWorm (CVE-2014-4114) 0-Day
Información de seguridad
2 Min de lectura

Analysis Of SandWorm (CVE-2014-4114) 0-Day

Background iSIGHT Partners, working with Microsoft, today published details of a 0day vulnerability (CVE-2014-4114) used in a possible Russian cyber-espionage campaign targeting NATO, the European Union, the Telecommu...
#BASHed Evolution Of Shellshock Attack Payloads
Información de seguridad
4 Min de lectura

#BASHed Evolution Of Shellshock Attack Payloads

Background We recently blogged about the GNU Bash arbitrary code execution vulnerability (CVE-2014-6271) dubbed as Shellshock and covered some initial attacks that we captured in the wild during the first week of this v...
Shellshock Attacks Spotted In Wild [Updated Sept 26]
Información de seguridad
3 Min de lectura

Shellshock Attacks Spotted In Wild [Updated Sept 26]

[Updated Sept 26, 2014: added new analysis and exploit attempts] Background GNU Bash is susceptible to an arbitrary code execution vulnerability (CVE-2014-6271) dubbed as Shellshock. The vulnerability is due to fai...
A Look At The New Gameover Zeus Variant
Información de seguridad
4 Min de lectura

A Look At The New Gameover Zeus Variant

Background Zeus, also known as Zbot is one of the most notorious and wide-spread information stealing banking Trojans. It was first spotted in early 2007 and since then over the years it has evolved into a very sophis...

Otros artículos

Explore más temas