Gustavo Palazolo

Gustavo Palazolo

Former Staff Threat Research Engineer

Gustavo Palazolo is an expert in malware analysis, reverse engineering and security research, working many years in projects related to electronic fraud protection. He is currently working on the Netskope Research Team, discovering and analyzing new malware threats.

Blog Posts

Phishing Campaigns Abusing Telegram to Bypass MFA

Phishing Credential Theft

Phishing Campaigns Abusing Telegram to Bypass MFA

June 21, 20234 min read

Malware Ransomware

Threat Labs News Roundup: May 2023

June 9, 20234 min read

Netskope Threat Coverage: MOVEit Transfer Zero-Day

Netskope Threat Coverage: MOVEit Transfer Zero-Day

June 2, 20232 min read

Malware Ransomware

Threat Labs News Roundup: April 2023

May 8, 20234 min read

Netskope Threat Coverage: CrossLock Ransomware

Ransomware Malware

Netskope Threat Coverage: CrossLock Ransomware

May 2, 20233 min read

FedEx Phishing Campaign Abusing TrustedForm and PAAY

FedEx Phishing Campaign Abusing TrustedForm and PAAY

April 24, 20235 min read

Malware Ransomware

Threat Labs News Roundup: March 2023

April 10, 20234 min read

CVE-2023-21716: Microsoft Word RCE Vulnerability

CVE-2023-21716: Microsoft Word RCE Vulnerability

March 27, 20232 min read

Emotet Comeback: New Campaign Using Binary Padding to Evade Detection

Emotet Comeback: New Campaign Using Binary Padding to Evade Detection

March 22, 20233 min read

Vulnerability Credential Theft

CVE-2023-23397: Microsoft Outlook Zero-Day Exploited by APT28

March 21, 20231 min read

Netskope Threat Coverage: BlackSnake Ransomware

Ransomware Malware

Netskope Threat Coverage: BlackSnake Ransomware

March 16, 20236 min read

Attackers Increasingly Abusing DigitalOcean to Host Scams and Phishing

Phishing Social Engineering

Attackers Increasingly Abusing DigitalOcean to Host Scams and Phishing

March 9, 20238 min read

Malware Ransomware

Threat Labs News Roundup: February 2023

March 7, 20234 min read

Malware Ransomware

Threat Labs News Roundup: January 2023

February 16, 20234 min read

ChatGPT: Dispelling FUD, Driving Awareness About Real Threats

ChatGPT: Dispelling FUD, Driving Awareness About Real Threats

January 20, 20236 min read

Netskope Threat Coverage: Prestige Ransomware

Ransomware Malware

Netskope Threat Coverage: Prestige Ransomware

November 18, 20224 min read

Cloud Abuse: New Technique Using Adobe Acrobat to Host Phishing

Cloud Abuse: New Technique Using Adobe Acrobat to Host Phishing

November 16, 20223 min read

New Phishing Technique Targeting Over 20 Crypto Wallets

Phishing Credential Theft

New Phishing Technique Targeting Over 20 Crypto Wallets

November 10, 20223 min read

BlackCat Ransomware: Tactics and Techniques From a Targeted Attack

Ransomware Malware

BlackCat Ransomware: Tactics and Techniques From a Targeted Attack

November 9, 202213 min read

RedLine Stealer Campaign Abusing Discord via PDF Links

Malware Phishing

RedLine Stealer Campaign Abusing Discord via PDF Links

October 3, 20225 min read

Netskope Threat Coverage: LockBit’s Ransomware Builder Leaked

Netskope Threat Coverage: LockBit’s Ransomware Builder Leaked

September 26, 20225 min read

Attackers Continue to Abuse Google Sites and Microsoft Azure to Host Cryptocurrency Phishing

Phishing Credential Theft

Attackers Continue to Abuse Google Sites and Microsoft Azure to Host Cryptocurrency Phishing

September 15, 20226 min read

AsyncRAT: Using Fully Undetected Downloader

AsyncRAT: Using Fully Undetected Downloader

August 29, 20226 min read

Abusing Google Sites and Microsoft Azure for Crypto Phishing

Phishing Credential Theft

Abusing Google Sites and Microsoft Azure for Crypto Phishing

August 9, 20224 min read

Ousaban: LATAM Banking Malware Abusing Cloud Services

Ousaban: LATAM Banking Malware Abusing Cloud Services

August 4, 20227 min read

Emotet: Still Abusing Microsoft Office Macros

Emotet: Still Abusing Microsoft Office Macros

June 27, 20224 min read

GoodWill Ransomware? Or Just Another Jasmin Variant?

GoodWill Ransomware? Or Just Another Jasmin Variant?

June 2, 20227 min read

CVE-2022-30190: New Zero-Day Vulnerability (Follina) in Microsoft Support Diagnostic Tool

Vulnerability Malware

CVE-2022-30190: New Zero-Day Vulnerability (Follina) in Microsoft Support Diagnostic Tool

June 1, 20223 min read

RedLine Stealer Campaign Using Binance Mystery Box Videos to Spread GitHub-Hosted Payload

Malware Credential Theft

RedLine Stealer Campaign Using Binance Mystery Box Videos to Spread GitHub-Hosted Payload

May 12, 20226 min read

Emotet: New Delivery Mechanism to Bypass VBA Protection

Emotet: New Delivery Mechanism to Bypass VBA Protection

May 6, 20225 min read

Two RCE Vulnerabilities Found in Spring Framework

Two RCE Vulnerabilities Found in Spring Framework

April 6, 20222 min read

New Formbook Campaign Delivered Through Phishing Emails

Malware Phishing

New Formbook Campaign Delivered Through Phishing Emails

March 11, 20229 min read

Netskope Threat Coverage: HermeticWiper

Netskope Threat Coverage: HermeticWiper

February 25, 20224 min read

Microsoft Office: VBA Blocked By Default in Files From the Internet

Malware Phishing

Microsoft Office: VBA Blocked By Default in Files From the Internet

February 24, 20227 min read

Netskope Threat Coverage: WhisperGate

Netskope Threat Coverage: WhisperGate

January 26, 20227 min read

Infected PowerPoint Files Using Cloud Services to Deliver Multiple Malware

Phishing Malware

Infected PowerPoint Files Using Cloud Services to Deliver Multiple Malware

January 24, 20227 min read

Abusing Microsoft Office Using Malicious Web Archive Files

Malware Phishing

Abusing Microsoft Office Using Malicious Web Archive Files

January 12, 20226 min read

Netskope Threat Coverage: Night Sky

Ransomware Vulnerability

Netskope Threat Coverage: Night Sky

January 11, 20223 min read

CVE-2021-44832: New Vulnerability Found in Apache Log4j

December 29, 20212 min read

CVE-2021-45105: New DoS Vulnerability Found in Apache Log4j

CVE-2021-45105: New DoS Vulnerability Found in Apache Log4j

December 20, 20212 min read

Khonsari: New Ransomware Delivered Through Log4Shell

Ransomware Malware

Khonsari: New Ransomware Delivered Through Log4Shell

December 16, 20214 min read

CVE-2021-45046: New Log4j Vulnerability Discovered

December 15, 20212 min read

Black Friday is Coming and LNKR Malware Might Be Watching You

Black Friday is Coming and LNKR Malware Might Be Watching You

November 24, 20214 min read

Malicious Office Documents: Multiple Ways to Deliver Payloads

Malicious Office Documents: Multiple Ways to Deliver Payloads

November 19, 20214 min read

Netskope Threat Coverage: The Return of Emotet

Netskope Threat Coverage: The Return of Emotet

November 18, 20213 min read

DBatLoader: Abusing Discord to Deliver Warzone RAT

Malware Credential Theft

DBatLoader: Abusing Discord to Deliver Warzone RAT

October 21, 20214 min read

SquirrelWaffle: New Malware Loader Delivering Cobalt Strike and QakBot

Malware Command and Control

SquirrelWaffle: New Malware Loader Delivering Cobalt Strike and QakBot

October 7, 20216 min read

Microsoft Office Document Triggering New Zero-Day

Vulnerability Malware

Microsoft Office Document Triggering New Zero-Day

September 13, 20214 min read

Hive Ransomware: Actively Targeting Hospitals

Ransomware Malware

Hive Ransomware: Actively Targeting Hospitals

September 10, 20219 min read

Netskope Threat Coverage: BlackMatter

Ransomware Malware

Netskope Threat Coverage: BlackMatter

August 23, 20218 min read

Netskope Threat Coverage: LockBit

Ransomware Malware

Netskope Threat Coverage: LockBit

August 12, 20214 min read

Netskope Threat Coverage: 2020 Tokyo Olympics Wiper Malware

Netskope Threat Coverage: 2020 Tokyo Olympics Wiper Malware

July 29, 20214 min read

Netskope Threat Coverage: REvil

Ransomware Supply Chain

Netskope Threat Coverage: REvil

July 7, 20213 min read

Past Conferences

BSides SP: BlackCat Ransomware: Táticas e Técnicas em um Ataque Direcionado

BSides SP: BlackCat Ransomware: Táticas e Técnicas em um Ataque Direcionado

Gustavo Palazolo

November 20, 2022

RoadSec: Quem habilitou as macros? Cenário de ataques via arquivos Microsoft Office

RoadSec: Quem habilitou as macros? Cenário de ataques via arquivos Microsoft Office

Gustavo Palazolo

July 9, 2022

You sh0t the Sheriff: Quem habilitou as macros? Cenário de ataques via arquivos Microsoft Office.

You sh0t the Sheriff: Quem habilitou as macros? Cenário de ataques via arquivos Microsoft Office.

Gustavo Palazolo

May 23, 2022