North Korean hacking group APT37 was seen deploying new implants, backdoors, and other tools in attacks targeting air-gapped ...
While some of the campaigns have been found to leverage the technique to deliver malware, others send users to pages hosted on phishing frameworks such as EvilProxy, which act as an ...
IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...
IntroductionIn January 2026, Zscaler ThreatLabz observed activity by a suspected Iran-nexus threat actor targeting government officials in Iraq. ThreatLabz discovered previously undocumented malware ...
Cisco Talos tracks UAT-10027 targeting U.S. education and healthcare with Dohdoor DoH-based backdoor and Cobalt Strike payload.
The security researchers from Zscaler ThreatLabz have also discovered five new tools deployed by the North Korean hacking ...
There are moments in the evolution of a nation when a single incident, seemingly isolated, exposes a deeper and more troubling ...
The big VMware Exit continues and will continue over the next few years. With the ongoing shifts in the virtualization market ...
PowerShell can do far more than most users realize. Explore 10 hidden capabilities that save time, improve reporting, and supercharge your workflow.
Microsoft has identified a phishing campaign using malformed links to legitimate OAuth services to redirect to malware ...
OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users from legitimate sign‑in pages to attacker‑controlled infrastructure.
The February optional patch for Windows 11 brings a network speed tool to the taskbar, new camera controls in the Settings app, and a built-in Sysmon tool.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results