logo

Things you need to worry about

ID: 17f78d1a-9078-5fac-956b-ced4b43a1b3f

STIX ID: report--17f78d1a-9078-5fac-956b-ced4b43a1b3f

Feed Name: Zscaler Security Research Blog

Threat Score
75/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

Zscaler ThreatLabZ observed compromised Olympics-themed websites that redirect visitors via injected scripts and EITest gates to RIG and Neutrino exploit kits, resulting in Qakbot infections (backdoor/infostealer) and CryptXXX ransomware deployments; the report details the exploitation chain (malicious jquery injection, SWF exploit, XOR-encrypted payload), observed behaviors (service-based persistence, shadow copy deletion), provides telemetry (Neutrino activity), and recommends mitigations such as enabling click-to-play, keeping Flash/OS/browser patched, using ad-blockers, 2FA, and regular backups.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.