The cat and mouse game between Fake AV and the security researchers will probably keep going on for a long time. Since the attackers keep modifying their content, malicious HTML, JavaScript and executables, Zscaler has to keep monitoring the changes in order to protect their customers given this rapidly-evolving threat.

A quick look into the evolving nature of fake AV attacks, and the continual work that goes in to keeping up to date with the attackers.