In this episode of SecOps Weekly, Zscaler Staff Intelligence Analyst Stef Rand and Senior Security Researcher Chris Brook discuss the latest top threats observed across Zscaler MDR endpoints including a newcomer to the list (CNCMachineRMS) and how it’s leveraging Scarlet Goldfinch as a distribution mechanism. Chapters – 00:00 - 02:09: Welcome to SecOps Weekly! 02:10 - 07-15: Top 10 list 07:16 - 16:13: CNCMachineRMS tradecraft shifts 16:13 - 20:01: CastleLoader returns 20:02 - 29:51 Exodus Wallet RAT cluster29:52 - 30:41: Final thoughts Show Notes – 📡 LevelBlue’s CNCMachineRMS writeup: https://www.levelblue.com/blogs/spiderlabs-blog/cncmachinerms-the-undocumented-rat-at-the-end-of-a-babadeda-chain 📺 Crypters & Loaders (ft. Tony Lambert): https://www.youtube.com/watch?v=_FZwVG0I02I 👀 Scarlet Goldfinch at-a-glance: https://redcanary.com/threat-detection-report/threats/field-guide/ 📖 Learn about StealC tradecraft: https://www.zscaler.com/blogs/security-research/i-stealc-you-tracking-rapid-changes-stealc 🏰 Details on CastleLoader: https://www.zscaler.com/blogs/cybersecurity-best-practices/intelligence-insights-july-2026 🤖 AI Generated ClickFix campaign: https://www.zscaler.com/blogs/security-research/clickfix-campaign-generated-ai-delivers-smartrat About Zscaler Zscaler (NASDAQ: ZS) is the pioneer and global leader in zero trust security and the cybersecurity platform for the AI era. The world's largest businesses, critical infrastructure organizations, and government agencies rely on the Zscaler Zero Trust Exchange™ to secure their users, devices, workloads, and AI agents, protect their data, and safely adopt AI, all on one unified platform. Distributed across 200+ data centers and inspecting more than 750 billion transactions a day, Zscaler blocks billions of threats while reducing cost and complexity for the modern enterprise. ©2025 Zscaler, Inc. All rights reserved. Zscaler, Zscaler Digital Exchange, Zscaler Internet Access, ZIA, Zscaler Private Access, and ZPA are either (i) registered trademarks or service marks or (ii) trademarks or service marks of Zscaler, Inc. in the United States and/or other countries. Any other trademarks are the properties of their respective owners. #malware #remoteaccess #clickfix #cybersecurity #intelligence

 213      0