Independence Day greeting campaign delivers Emotet

| | Malware
Recently, Zscaler's research team, ThreatLabZ, came across malicious Microsoft Office documents delivering Emotet malware via attachments using "Greeting Card" as the document name. The malware author leveraged the popular 4th of July holiday, the USA's Independence Day, to lure users into downloading and opening the malicious documents. We saw over ... Read More

njRAT pushes Lime ransomware and bitcoin wallet stealer

| | Malware
njRAT, also known as Bladabindi, is a remote access Trojan (RAT) that was first seen in 2013 and continues to be one of the most prevalent malware family. It was developed using the Microsoft .NET framework and, like many other RATs, provides complete control of the infected system and delivers ... Read More

Infostealer spreading through a compromised website

The Zscaler ThreatLabZ team has uncovered a new password stealer malware variant being delivered through a compromised website. The payload is Microsoft Intermediate Language (MSIL) compiled and steals the passwords from victims' system, browser, and FTP software. The payload analyzed in this blog was served from the compromised website dnoymuzik[.]com/wp-content/test/conhost[.]exe ... Read More