B2B cyber security

Risks from increasing use of artificial intelligence

22 April 2024

A report shows that 569 TB of corporate data is passed on to AI tools and underlines the importance of better data security. Enterprise AI/ML transactions increased from 521 million monthly in April 2023 to 3,1 billion in January 2024. With 21 percent of all AI transactions, manufacturing generates the most AI traffic in the Zscaler Cloud, followed by finance and Insurance (14 percent) and services (13 percent). The most popular enterprise AI/ML applications by transaction volume are ChatGPT, Drift, OpenAI, Writer, and LivePerson. The five countries with the most AI transactions in companies are the USA, India, Great Britain,…

15 years of Qakbot – a review

March 17, 2024

| No comments

| PR News

Qakbot (aka QBot or Pinkslipbot) is a Trojan with a 15-year evolutionary history. From its origins as a banking Trojan, it continued to evolve into malware, which is now used for lateral distribution in a network and the deployment of ransomware. After being broken up by law enforcement authorities in August 2023, the 5th version of Qakbot was released a few months later. Zscaler analyzed the transformation of a resilient, persistent and innovative malware. Recently, the security researchers discovered that the threat actors have updated their code base to support 64-bit versions of Windows. In addition,…

Secure access through Zero Trust SD-WAN

March 13, 2024

| No comments

| PR News

A leading cloud security provider has announced a new Zero Trust SASE solution built on Zero Trust SD-WAN. It connects all branches with each other and secures data traffic. The industry's first single-vendor SASE solution is powered by Zscaler Zero Trust AI and helps organizations reduce costs and complexity while implementing zero trust security for users, devices and workloads. In addition, Zscaler announces the availability of the Zero Trust SD-WAN solution and its plug-and-play appliances. This solution enables customers to provide secure connectivity for branches, factories and data centers while…

Cyber danger: HTML smuggling

March 4, 2024

| No comments

| Stories

With HTML smuggling, the malicious file is first created on the user's computer. Therefore, traditional anti-malware programs and sandboxes do not detect the attack. AI-based browser isolation provides protection. HTML smuggling is a highly efficient malware distribution technique that uses legitimate HTML5 and JavaScript functions to infect. This smuggling technique distributes Remote Access Trojans (RATs), banking malware, and other malicious payloads because HTML smuggling bypasses traditional security controls such as web proxies, email gateways, and legacy sandboxes. Attackers hide their activities in seemingly harmless web traffic, making it difficult for security tools to...

Growing threats over the last year

28. February 2024

| No comments

| Stories

In 2023, threats have increased significantly. Attacks via encrypted channels have increased by 24 percent. Manufacturing is once again at the top of the most targeted sectors. These are the results of the annual ZsclaerTM ThreatLabz State of Encrypted Attacks Report 2023 at a glance: Threats transported over HTTPS traffic increased by 24 percent year-over-year in the Zscaler cloud, representing almost 30 billion threats blocked. Encrypted malware and malicious content are one of the biggest threats, accounting for 78 percent of attacks observed. The manufacturing sector was responsible for 32 percent of encrypted…

Phishing, vishing and quishing

19. February 2024

| No comments

| Stories

In the early days, phishing attacks were often very simple and used legitimate sources of written communication such as email to gain access to sensitive data. In the age of AI, it is tempting to consider how attackers are modernizing their phishing methods. With the growing popularity of GenAI tools, voice-based phishing attacks – also known as “vishing” – have become the new norm and the evolution of attack methods continues. Phishing as a springboard To understand the importance of phishing in the malware industry, it helps to look at the anatomy of a...

IoT malware attacks up 400 percent!

27 November 2023

| No comments

| PR News

Since last year, IoT malware attacks have increased by 400 percent. This is proven by the new ZscalerTM ThreatLabz 2023 Enterprise IoT and OT Threat Report. Also important: The manufacturing and education sectors are the hardest hit. This year's ZscalerTM ThreatLabz 2023 Enterprise IoT and OT Threat Report provides a detailed look at malware activity over six months, analyzing approximately 300.000 blocked attack attempts on IoT devices blocked by the Zscaler Zero Trust Exchange™ platform. The high number of attacks on IoT devices has resulted in a 400 percent increase compared to the previous year...

Malware HijackLoader uses evasion techniques to attack

September 29, 2023

| No comments

| Short news

The HijackLoader downloader is becoming increasingly popular among threat actors, which is why analysts from the ThreatLabZ team have now examined this malware, which has been appearing since July 2023, in more detail. Due to its modular architecture, the loader is able to use a variety of modules for code injection and execution. Based on Zscaler telemetry data, it can be concluded that HijackLoader poses a high threat potential as it can be used to load various malware families such as Danabot, SystemBC and RedLine Stealer. It uses embedded modules for code injection, which enable flexibility and...

CryptNet: Ransomware-as-a-Service with obfuscation

July 5, 2023

| No comments

| Short news

The ransomware group CryptNet has been active since April 2023. Their malware, which is also offered as ransomware-as-a-service on the dark web, is simple but arguably effective and well-disguised against detections. An analyst from the Zscaler ThreatLabz team. The new group sells their ransomware-as-a-service in underground forums and recruits partners for their criminal activities there. The analysts now examined the modus operandi of the current campaign, which according to the threat actors steals data from affected companies before decryption in order to reinforce their ransom demands by publishing them on a data leak website. Ransomware including obfuscation The code of the…

New Trojan Pikabot

June 9, 2023

| No comments

| Short news

The malicious backdoor Pikabot is modular, with a loader and a core component that implements most of the functionality. A number of anti-analysis techniques are employed, making it difficult to detect malicious activity. The analysis found a similarity to Qakbot in terms of distribution mode, campaigns, and malware behavior, with no indication of whether they are the same malware authors. It is capable of receiving commands from a command-and-control server, which injects any shellcode, DLL, or executable file. Malicious Functionality After…

Tag: Zscaler

Risks from increasing use of artificial intelligence

15 years of Qakbot – a review

Secure access through Zero Trust SD-WAN

Cyber danger: HTML smuggling

Growing threats over the last year

Phishing, vishing and quishing

IoT malware attacks up 400 percent!

Malware HijackLoader uses evasion techniques to attack

CryptNet: Ransomware-as-a-Service with obfuscation

New Trojan Pikabot

Which user group do you belong to? (No tracking!)

Important links

Latest Articles & News

It was searched for

Social Media