Zscaler Cloud Security Logo
Empresa > Blog

Noticias y puntos de vista de la voz líder en transformación digital segura

Ransomware
Cyber honeycomb containing locks.
Ideas e investigación
7 Min de Lectura

Peeking into PrivateLoader

Key Points PrivateLoader is a downloader malware family that was first identified in early 2021 The loader’s primary purpose is to download and execute additional malware as part of a pay-per-install (PPI) malware distribution service PrivateLoader is used by multiple threat actors to distribute ransomware, information stealers, banking t...
A digital screen with compromised code
Ransomware
4 Min de Lectura

What You Need to Know About the LAPSUS$ Supply Chain Attacks

Join the ThreatLabz research team and our product experts on Tuesday, 3/29/22 at 9:30am PT for an analysis of the LAPSUS$ Okta attack and strategies for assessing and reducing the impact to your organization. The extortion threat group LAPSUS$ arrived on threat researchers' radar back in December 2021, with a burst of erratic attacks that repres...
Tracing the Evolution of Thanos Ransomware Variants
Ideas e investigación
12 Min de Lectura

Midas Ransomware: Tracing the Evolution of Thanos Ransomware Variants

Key Takeaways: An in-depth analysis of Midas and trends across other Thanos ransomware variants reveals how ransomware groups shifted tactics in 2021 to: lower sunk costs by using RaaS builders to reduce development time increase payouts with double extortion tactics by using their own data leak sites extend the length and effectiveness o...
A person explaining something in a meeting
Ransomware
4 Min de Lectura

Understanding the Assignment: Defending Against Ransomware

The education industry has unceremoniously emerged as the second most common target for ransomware. In 2020, at least 1,681 schools, colleges, and universities of all sizes and prestige were infected. Institutions face the difficult challenge of preserving academic freedom, easy access to information, and open collaboration while defending from thr...
Ransomware hacker
Ransomware
4 Min de Lectura

Technical Analysis of PartyTicket Ransomware

Key Points PartyTicket is an unsophisticated and poorly designed ransomware family that is likely intended to be a diversion from the Hermetic wiper attack The ransomware generates a single AES key that is used to encrypt targeted files in GCM mode Files can be decrypted without having access to the RSA private key because the AES key is ...
Return of Emotet: Malware Analysis
Ideas e investigación
9 Min de Lectura

Return of Emotet: Malware Analysis

Key Points Emotet is a downloader malware used to download and execute additional modules and payloads. In January 2021, a law enforcement action disrupted the malware, its infrastructure, and some of its threat actors. After almost a year-long hiatus, Emotet returned to the threat landscape in November 2021. Emotet modules focus on cre...
Deception Engineering
Ideas e investigación
7 Min de Lectura

Deception Engineering

Introduction One skill that the Zscaler Deception team has become really good at is analyzing adversary tactics, techniques, and toolsets and hypothesizing how we could disrupt the adversary playbook with deception. What we want to talk about today is a concept we like to internally call “Deception Engineering”. It’s a wordplay on Detect...
ransomware
Ransomware
3 Min de Lectura

AtomSilo Ransomware Enters the League of Double Extortion

Ransomware is used widely in cyberattacks to disrupt the victim's organization. Over the last two years, many attackers have evolved their ransomware tactics to include data exfiltration. This tactic is known as "double-extortion": attackers demand ransom for the data decryption in addition to the ransom to prevent public release of the stolen data...
phishing-spam
Zscaler Cloud Platform
6 Min de Lectura

Cómo proteger sus datos frente al ransomware y la doble extorsión

El malware ha sido el archienemigo de las organizaciones de todo el mundo durante años y el ransomware, en particular, es un enemigo extremadamente letal. Bloquear los archivos de las víctimas mediante cifrado y exigir un rescate de descifrado ha demostrado ser una táctica eficaz para los ciberdelincuentes, y el flujo constante de los últimos ataqu...
Ransomware hacker
Ransomware
3 Min de Lectura

DoppelPaymer Continues to Cause Grief Through Rebranding

In early May 2021, DoppelPaymer ransomware activity dropped significantly. Although the DoppelPaymer leak site still remains online, there has not been a new victim post since May 6, 2021. In addition, no victim posts have been updated since the end of June. This lull is likely a reaction to the Colonial Pipeline ransomware attack which occurred on...

Explore más temas