DigitalCIO
No Result
View All Result
  • Home
  • Tech News
  • Market Insights
  • CIO Interviews
  • Events and Conferences
  • Opinion and Analysis
  • Resources
DigitalCIO
  • Home
  • Tech News
  • Market Insights
  • CIO Interviews
  • Events and Conferences
  • Opinion and Analysis
  • Resources
No Result
View All Result
Digitalcio
No Result
View All Result
Home Tech News

Zscaler Discovers Spread of Android and Windows RATs Via Online Meetings

DigitalCIO Bureau by DigitalCIO Bureau
March 11, 2024
in Tech News
0
74
SHARES
1.2k
VIEWS
Share on FacebookShare on Twitter

The Zscaler ThreatLabz team recently discovered a threat actor creating fraudulent Skype, Google Meet, and Zoom websites to spread malware. The threat actor spreads Remote Access Trojans (RATs) including SpyNote RAT to Android users and NjRAT and DCRat to Windows users, which can steal confidential information, log keystrokes, and steal files.

The attacker utilized shared web hosting, hosting all these fake online meeting sites on a single IP address. All of the fake sites were in Russian as shown in all the figures below. In addition, the attackers hosted these fake sites using URLs that closely resembled the actual websites.

Attack Sequence The diagram below illustrates how the malware was distributed and executed on the victim’s machine during the campaign:

When a user visits one of the fake sites, clicking on the Android button initiates the download of a malicious APK file, while clicking on the Windows button triggers the download of a BAT file. The BAT file when executed performs additional actions, ultimately leading to the download of a RAT payload.

The Zscaler sandbox played a vital role in analyzing the behavior of different files. The sandbox analysis allowed us to identify threat scores and pinpoint specific MITRE ATT&CK techniques that were triggered during the analysis process.

The research demonstrates that businesses may be subject to threats that impersonate online meeting applications. In this example, a threat actor is using these lures to distribute RATs for Android and Windows, which can steal confidential information, log keystrokes, and steal files. The findings highlight the need for robust security measures to protect against advanced and evolving malware threats and the importance of regular updates and security patches.

As cyber threats continue to evolve and become increasingly complex, it is critical to remain alert and take proactive measures to protect against them. Zscaler’s ThreatLabz team continues to monitor these threats and share their findings.

 

Tags: Zscaler
Share30Tweet19
DigitalCIO Bureau

DigitalCIO Bureau

Recommended For You

Okaya Power Group Appoints Prakash Dharmani as CIO

by DigitalCIO Bureau
July 9, 2025
0
Okaya Power Group Appoints Prakash Dharmani as CIO

Prakash Dharmani has joined Okaya Power Group as its new Chief Information Officer (CIO). With over 33 years of experience across industries such as petrochemicals, refining, specialty packaging,...

Read moreDetails

Total Unique Malware Increases By 171%: WatchGuard

by DigitalCIO Bureau
July 9, 2025
0
OpenText Names LockBit  Nastiest Malware Of 2024

New WatchGuard research reveals 171% increase in total unique malware as attackers defy traditional defenses. Other key findings show an increase in email-borne malware threats, a rise in...

Read moreDetails

Dassault Systèmes Acquires Ascon Qube To Extend Virtual Twin Offering

by DigitalCIO Bureau
July 9, 2025
0

Dassault Systèmes has acquired the Ascon Qube technology from Ascon Systems Holding GmbH, a developer of software-defined automation systems.  The acquisition of Ascon Qube accelerates Dassault Systèmes’ leadership...

Read moreDetails

July 2025 Patch Tuesday: Comment from Satnam Narang, Sr. Staff Research Engineer, Tenable

by DigitalCIO Bureau
July 9, 2025
0
Microsoft Patch Tuesday 2023 Wrapped

"For the third consecutive July, Microsoft patched over 125 CVEs: 130 in 2023, 138 in 2024, and 127 in 2025. This month's count is well above the average...

Read moreDetails

Barracuda Unveils Backup Solution For Entra ID

by DigitalCIO Bureau
July 9, 2025
0

Barracuda Networks has announced the launch of Barracuda Entra ID Backup Premium – a comprehensive, cost-effective solution to safeguard Microsoft Entra ID environments from accidental and malicious data loss. With...

Read moreDetails
Next Post
IBM Makes Llama 2 Available Within Its Watsonx AI And Data Platform

IBM Launches Mainframe Skills Council with SHARE

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Related News

ServiceNow Acquires AI Native Conversation Data Analysis Platform Cuein

ServiceNow Acquires AI Native Conversation Data Analysis Platform Cuein

January 20, 2025
Proofpoint Appoints Bikramdeep Singh as Country Manager for India

Proofpoint Appoints Bikramdeep Singh as Country Manager for India

March 10, 2025
Check Point Launches Next Generation Quantum Smart-1 Management Appliances

Check Point Launches Next Generation Quantum Smart-1 Management Appliances

May 30, 2025

Browse by Category

  • Acquisition
  • Appointment
  • Archive
  • Artificial Intelligence
  • CIO Interviews
  • Cloud
  • Datacenter
  • Events and Conferences
  • Market Insights
  • News
  • Opinion and Analysis
  • Products
  • Resources
  • Security
  • Storage
  • Tech News
  • Telecom
Digitalcio

Welcome to DigitalCIO, your ultimate source for staying ahead in the ever-evolving world of technology and business.

BROWSE BY TAG

Acquisition AI Appointment artificial intelligence Artificial Intelligence and Machine Learning AWS Barracuda Big Data and Analytics Blockchain CISCO Cloud Computing Cloudflare Commvault CrowdStrike Cybersecurity Digital Transformation Dynatrace E-books Fortinet Gartner GenAI Generative AI Google Cloud HCLTech Honeywell IBM Infographics Internet of Things (IoT) Kaspersky Microsoft Netskope NTT DATA Palo Alto Networks Panel Discussion Qlik Salesforce ServiceNow Sophos Tenable Trend Micro Veeam Veeam Software Webinars Whitepaper Zscaler

CATEGORIES

  • Tech News
  • Market Insights
  • CIO Interviews
  • Events and Conferences
  • Opinion and Analysis
  • Resources
  • Archive

NAVIGATION

  • Home
  • About Us
  • Advertise with Us
  • Contact Us

© 2024 digitalcio.in - All rights reserved.

No Result
View All Result
  • Home
  • Tech News
  • Market Insights
  • CIO Interviews
  • Events and Conferences
  • Opinion and Analysis
  • Resources

© 2024 digitalcio.in - All rights reserved.

Are you sure want to unlock this post?
Unlock left : 0
Are you sure want to cancel subscription?