Skip main navigation Home/ Security/ Threat Labs Juniper Threat Labs Juniper Threat Labs is a threat intelligence portal that features rapid and actionable insights from world-class security researchers. IPS Signatures Application Signatures IPS Signatures Application Signatures In the Wild Show all Podcasts Curbing Ransomware Trends: The Role of Network Posture, Technology, Politics and Regulation, November 23, 2021 | Episode 33 Listen to the Podcast BlackMatter Ransomware as a Service, BlackByte Ransomware and Sinclair Attack, October 20, 2021 | Episode 32 Listen to the Podcast OMIGOD and Netgear vulnerabilities, September 22, 2021 | Episode 31 Listen to the Podcast Aggah using ZenDesk, Confluence and ManageEngine vulnerabilities. September 15, 2021 | Episode 30 Listen to the Podcast TCP Reflective DDoS Attacks, August 22, 2021 | Episode 29 Listen to the Podcast Kaseya Service Chain Attack, July 9 | Episode No. 28 Listen to the Podcast Preventing Another Colonial Pipeline Ransomware Attack, June 17 | Episode No. 27 Listen to the Podcast Linux SSH Backdoors, May 11 | Episode No. 26 Listen to the Podcast PHP Repo Compromise, April 15 | Episode No. 25 Listen to the Podcast Ransomware Resurgence, April 5 | Episode No. 24 Listen to the Podcast MS Exchange ProxyLogon vulnerability CVE-2021-26855, March 23 | Episode No. 23 Listen to the Podcast Dependency Confusion Attack, February 19 | Episode No. 22 Listen to the Podcast Emotet Takedown, February 3 | Episode No. 21 Listen to the Podcast Sunburst Attacks - Why Was the Stealth So Effective?, January 8, 2021 | Episode No. 20 Listen to the Podcast SolarWinds Orion Compromise, December 22 | Episode No. 19 Listen to the Podcast Gitpaste-12: What You Need to Know, November 25 | Episode No. 18 Listen to the Podcast Threat Intelligence & Threat Research: Better Together, November 9 | Episode No. 17 Listen to the Podcast Priority Botnet, Pastebin-like Malware Campaigns, Emotet Resurgence, October 13 | Episode No.16 Listen to the Podcast Microsoft Zerologon CVE-2020-1472, DoppelPaymer Ransomware, IoT Security, October 1, 2020 | Episode No. 15 Listen to the Podcast Zeppelin ransomware, CVE-2020-16875, CVE-2020-1210 and 2FA phishing attacks, September 15, 2020 | Episode No. 14 Listen to the Podcast IcedID, Shellshock and More, September 10, 2020 | Episode No. 13 Listen to the Podcast Black Hat, DEFCON, Supply Chain Attacks and More, August 12, 2020, Episode No. 12 Listen to the Podcast Twitter Hack, Meow Attacks, and More, July 24, 2020, Episode No. 11 Listen to the Podcast Conti Ransomware, Phishing Attacks and More, July 14, 2020, Episode No 10. Listen to the Podcast Botnet Malware Targeting Docker Servers, Browser Extension Malware, June 29, 2020 Episode No. 9 Listen to the Podcast Ransomware Attacks, Municipal Governments and More, June 17, 2020 Episode No. 8 Listen to the Podcast Pegasus, Juicy Potato and Cryptomining, June 9, 2020 Episode No. 7 Listen to the Podcast Tips for Safe Distributed Working, May 20, 2020 Episode No. 6 Listen to the Podcast Fallout of Pulse CVE-2019-11510, Microsoft Patch Tuesday CVE-2020-1027, CVE-2020-1020 and CVE-2020-0938, April 17, 2020 Episode No. 5 Listen to the Podcast Working remote, Zoombombing, April 4, 2020 Episode No. 4 Listen to the Podcast Necurs Botnet Takedown, March 20, 2020 Episode No. 3 Listen to the Podcast Apache GhostRat CVE-2020-1938, Chrome and Exchange 0-days, Ransomware exfil, March 10, 2020 Episode No. 2 Listen to the Podcast MS CryptoAPI CVE-2020-0601, MS IE CVE-2020-0674, Citrix ADC 2019-19781, February 5, 2020 Episode No. 1 Listen to the Podcast Featured Content Dr. Mounir Hahad joins Daniel Newman, Principal Analyst at Futurum Tech to discuss the current state of our threat landscape. Watch the interview Dr. Mounir Hahad joins Aanand Krishnan, Founder and CEO of Tala Security to discuss how retailers and other organizations can protect themselves against Magecart and other skimming attacks. Register for Webinar Mounir Hahad, head of Juniper Threat Labs, discusses the challenges enterprises face with a hybrid work environment and how to improve security posture. Read the article Mounir Hahad, Head of Juniper Threat Labs, discusses IoT proliferation and widespread 5G and how this creates the perfect botnet storm. Read the article Mounir Hahad, head of Juniper Threat Labs, discusses Juniper's ability to analyze encrypted traffic in this interview with ITSP Magazine. Read the article When it comes to online shopping, vendors need to be aware of the security risks posed by supply chain attacks. Mounir Hahad, Head of Juniper Threat Labs, some useful tools and tips. Read the article Malware Knowledge Base BTCWare BTCWare is a ransomware that first appeared around March 2017. We describe here the latest variant, called BTC.Aleta due to the extension used on the encrypted files. Learn more Jaff Jaff ransomware is a file encrypting malware that arrives via download by special crafted macro documents from spam emails. It encrypts users data with a “.jaff” file extension and then requests the victim pay a ransom. Learn more Donoff Donoff is a type of malicious office document that contains macro. This type malware usually arrives as an attachment or a direct link in spam mails. Learn more Juniper Threat Labs Discover the latest in cyber threats Ask the Expert In the News Wormable Gitpaste-12 Botnet Returns to Target Linux Servers, IoT Devices By: Ravie Lakshmanan, The Hacker News, December 15, 2020 Spotify Resets Passwords After Leaking User Data to Partners By: Phil Muncaster, Infosecurity Magazine, December 15, 2020 Spotify notifies customers of breach, files under CCPA By: Steve Zurier, SC Magazine, December 14, 2020 Payment industry leader predictions for 2021 By: Staff, Payments NEXT, December 10, 2020 This Is How Hackers Are Actively Exploiting a Critical Oracle Weblogic Vulnerability By: Drashti, The Digital Hacker, December 9, 2020 Magecart May Make Holidays Less Merry By: Mounir Hahad, Cyber Defense Magazine, December 3, 2020 DarkIRC Botnet Exploiting Oracle WebLogic Vulnerability By: Prajeet Nair, BankInfo Security, December 2, 2020 Recent Oracle WebLogic Vulnerability Exploited to Deliver DarkIRC Malware By: Ionut Arghire, SecurityWeek, December 2, 2020 Multiple Botnets Exploiting Critical Oracle WebLogic Bug — PATCH NOW By: Ravie Lakshmanan, The Hacker News, December 2, 2020 DarkIRC Bot Hits Oracle WebLogic vuln, Steals Bitcoin, Hijacks Browsers By: Staff, Information Security Buzz, December 2, 2020 Insights How to Defend Against Every Day IOT Threats Practical Tips for Preventing Ransomware Underground Malware Marketplace Company About Us Careers Corporate Responsibility Investor Relations Newsroom Events Contact Us Image Library Partners Partner Program Find a Partner Become a Partner Partner Login Get updates from Juniper Sign up Follow us © 1999 - 2020 Juniper Networks, Inc. All rights reserved ContactsFeedbackSite MapPrivacy PolicyLegal NoticesDMCA Policy