Zscaler Cloud Security Logo
Empresa > Blog

Noticias y puntos de vista de la voz líder en transformación digital segura

Ransomware
Ransomware hacker
Ransomware
5 Min de lectura

Nokoyawa Ransomware: Rust or Bust

Key Points Nokoyawa is a 64-bit Windows-based ransomware family that emerged in February 2022 The threat group behind Nokoyawa performs double extortion ransomware attacks: exfiltrating sensitive information from organizations, followed by file encryption and a ransom payment demand Nokoyawa was initially written in the C programming lang...
BlackBasta Hacker
Ransomware
7 Min de lectura

Back in Black... Basta

Key Points BlackBasta emerged in February 2022 with double extortion ransomware attacks against organizations The threat group exfiltrates sensitive information from organizations before performing file encryption and demanding a ransom payment The previous version of BlackBasta shared many similarities to the now defunct Conti ransomware...
Informe sobre el estado del ransomware de ThreatLabz 2022
Ransomware
6 Min de lectura

Informe sobre el estado del ransomware de ThreatLabz 2022

Los ataques de ransomware aumentaron otro 80 % entre febrero de 2021 y marzo de 2022, según un análisis de las cargas útiles de ransomware vistas en la nube de Zscaler. Los ataques de doble extorsión, que incluyen la exfiltración de datos además del cifrado, están aumentando aún más rápidamente, un 117 % de un año a otro. El informe Estado del ran...
Cyber honeycomb containing locks.
Ideas e investigación
7 Min de lectura

Peeking into PrivateLoader

Key Points PrivateLoader is a downloader malware family that was first identified in early 2021 The loader’s primary purpose is to download and execute additional malware as part of a pay-per-install (PPI) malware distribution service PrivateLoader is used by multiple threat actors to distribute ransomware, information stealers, banking t...
A digital screen with compromised code
Ransomware
4 Min de lectura

What You Need to Know About the LAPSUS$ Supply Chain Attacks

Join the ThreatLabz research team and our product experts on Tuesday, 3/29/22 at 9:30am PT for an analysis of the LAPSUS$ Okta attack and strategies for assessing and reducing the impact to your organization. The extortion threat group LAPSUS$ arrived on threat researchers' radar back in December 2021, with a burst of erratic attacks that repres...
Tracing the Evolution of Thanos Ransomware Variants
Ideas e investigación
12 Min de lectura

Midas Ransomware: Tracing the Evolution of Thanos Ransomware Variants

Key Takeaways: An in-depth analysis of Midas and trends across other Thanos ransomware variants reveals how ransomware groups shifted tactics in 2021 to: lower sunk costs by using RaaS builders to reduce development time increase payouts with double extortion tactics by using their own data leak sites extend the length and effectiveness o...
A person explaining something in a meeting
Ransomware
4 Min de lectura

Understanding the Assignment: Defending Against Ransomware

The education industry has unceremoniously emerged as the second most common target for ransomware. In 2020, at least 1,681 schools, colleges, and universities of all sizes and prestige were infected. Institutions face the difficult challenge of preserving academic freedom, easy access to information, and open collaboration while defending from thr...
Ransomware hacker
Ransomware
4 Min de lectura

Technical Analysis of PartyTicket Ransomware

Key Points PartyTicket is an unsophisticated and poorly designed ransomware family that is likely intended to be a diversion from the Hermetic wiper attack The ransomware generates a single AES key that is used to encrypt targeted files in GCM mode Files can be decrypted without having access to the RSA private key because the AES key is ...
Return of Emotet: Malware Analysis
Ideas e investigación
9 Min de lectura

Return of Emotet: Malware Analysis

Key Points Emotet is a downloader malware used to download and execute additional modules and payloads. In January 2021, a law enforcement action disrupted the malware, its infrastructure, and some of its threat actors. After almost a year-long hiatus, Emotet returned to the threat landscape in November 2021. Emotet modules focus on cre...
Deception Engineering
Ideas e investigación
7 Min de lectura

Deception Engineering

Introduction One skill that the Zscaler Deception team has become really good at is analyzing adversary tactics, techniques, and toolsets and hypothesizing how we could disrupt the adversary playbook with deception. What we want to talk about today is a concept we like to internally call “Deception Engineering”. It’s a wordplay on Detect...

Explore más temas