Zscaler ThreatLabz Exposes Global Cybersecurity Dangers

Every day, the Zscaler ThreatLabz Research Team analyzes real-time data from more than 250 billion daily transactions and 150 million blocked attacks globally via the Zscaler Zero Trust Exchange cloud security platform. This global team of security experts, researchers, and network engineers helps organizations proactively identify emerging large-scale threats, track bad actors, and provides actionable insights for enterprises to improve and strengthen their security posture. Led by Deepen Desai, Zscaler’s Global Chief Information Security Officer, the ThreatLabz team are “sentinels of security” when it comes to investigating the global threat landscape. 

Through its detailed research and analysis, ThreatLabz is able to correlate the data to highlight the latest cybersecurity trends and threats and explore possible ways to mitigate security risk, providing a unique vantage point and an incomparable level of intelligence. 

To arm the industry at large with information on emerging threats, Deepen publishes a monthly blog series in which he shares insights on the latest cybersecurity attacks and trends to help organizations protect its employees, operations, and data assets. In this month’s roundup, he covers:

• The discovery of a PHP version of Ducktail Infostealer that targets the public at large, rather than primarily employees with Admin or Finance access to Facebook Business accounts
• Evidence that the multi-function LilithBot malware is linked to the Eternity Group, a threat group associated with the Russian “Jester Group” that uses an as-a-service subscription model to distribute different Eternity-branded malware modules in underground forums, including a stealer, miner, botnet, ransomware, worm+dropper, and DDoS bot
• Unearthing an in-the-wild zero-day exploit in the Windows Common Log File System (CLFS) Driver, a vulnerability that may allow an attacker to gain system privileges

In addition to the blog series, the team recently published the 2022 ThreatLabz Data Loss Report, which examines the challenges of modern data security, including common vulnerabilities, emerging patterns, and the state of the modern threat landscape.

ThreatLabz derives all of its insights from the Zscaler security cloud - the world’s largest cloud security platform - which secures over 250 billion transactions daily blocking more than 7 billion threats and policy violations across the globe. The Zscaler security cloud forms the bedrock of the Zscaler Zero Trust Exchange, a cloud native platform that securely connects users, apps, and devices - using business policies - over any network, in any location. 

Keeping a watchful eye over the Zscaler security cloud gives the ThreatLabz Research Team unprecedented and unparalleled access to global threat data and, using diagnostic tools, detailed analysis, and historical modeling capabilities, they are able to identify and pinpoint threats with amazing granularity and accuracy.  

As threats continue to evolve and become more sophisticated and hackers get more brazen, ThreatLabz findings can be a valuable resource in any organization’s security arsenal.