Things you need to worry about
ID: 17f78d1a-9078-5fac-956b-ced4b43a1b3f
STIX ID: report--17f78d1a-9078-5fac-956b-ced4b43a1b3f
Feed Name: Zscaler Security Research Blog
Zscaler ThreatLabZ observed compromised Olympics-themed websites that redirect visitors via injected scripts and EITest gates to RIG and Neutrino exploit kits, resulting in Qakbot infections (backdoor/infostealer) and CryptXXX ransomware deployments; the report details the exploitation chain (malicious jquery injection, SWF exploit, XOR-encrypted payload), observed behaviors (service-based persistence, shadow copy deletion), provides telemetry (Neutrino activity), and recommends mitigations such as enabling click-to-play, keeping Flash/OS/browser patched, using ad-blockers, 2FA, and regular backups.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
