March Madness 2017:Malware & Phishing Attempts

Zscaler ThreatLabZ observed a surge in malicious activity exploiting March Madness interest: phishing bracket sites that transmit credentials in cleartext, domain-squatting of sports domains, and numerous fake streaming sites that use social engineering to push adware, browser hijackers, and PUPs (e.g., ReimageRepair). The report highlights increased traffic and malicious blocks during the tournament period, provides examples (screenshots and packet captures), and advises using official NCAA sources and caution when clicking streaming links or registering on third-party sites.