TrendAI™ Research

Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now

On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.

TrendAI™ Research

Eight Compromised eMudhra CA Keys: What Happened and What Organizations Should Do Now

Eight eMudhra intermediate CA keys were compromised, some as weak as 3 bits. Learn the code-signing risk and the steps to hunt for misuse and close the gap from TrendAI™.

TrendAI™ Research

Invasive Ads: The Unconventional Cyber Surveillance Attack Surface

TrendAI™ Research analyzed the activities of SHADOW-EARTH-79, an entity abusing the real-time ad-tech bidding process to track and profile individuals in conflict zones, sanctioned states, and other sensitive locations worldwide.

TrendAI™ Research

Scarecrow: Making the Attacker’s AI Say No

We developed Scarecrow, a tool that hides refusal instructions in documents so AI agents ingesting them are prompted to stop processing. Our findings show that this same technique can help defenders disrupt AI-driven access to sensitive documents.

TrendAI™ Research, Aya Debbagh, Trent Holmes

ShinyHunters Returns to PeopleSoft With a One-Character WAF Bypass

ShinyHunters is once again exploiting a previously patched vulnerability in PeopleSoft, which we analyzed in June 2026.

TrendAI™ Research

Critical Infrastructure Under Threat: How Frontier AI Changes the Risk Equation

The critical systems we can’t afford to lose are the same ones attackers are racing to target. With a new generation of AI-augmented cyber threats, what used to be weeks of warning can collapse into mere hours. What is the current state of the threat landscape for essential industries, and what can organizations do to fortify their defenses? Uncover this and more in our report.

TrendAI™ Research

ATF Reports Breach After Qilin Leak Site Appearance: Insights from TrendAI™

The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has reportedly appeared on the Qilin ransomware group’s leak site. Explore how Qilin operates and what organizations can learn from its past tactics.

TrendAI™ Research

Security 101: Virtual Patching

What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.

TrendAI™ Research

UK Power Facility Cyberattack Shutdown: What Critical-Infrastructure Operators and Defenders Need to Know

A reported cyberattack on a UK power-generation facility in July 2026 shows that even disruptions at a single site can raise broader questions about critical infrastructure resilience.

TrendAI™ Research

The Architecture Behind $1B: How Customers Run TrendAI Vision One™ on AWS, and Secure Their AI Workloads

TrendAI™ Research

Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know

Disruption reported across at least seven states, from equipment left accessible online. The issue is largely a matter of configuration and access control, and here's what to fix first.

TrendAI™ Research

Governing the Republic of AI Agents: The Framework Your AI Agents Already Need

AI agents have evolved from tools to autonomous participants in your organization, but governance has not kept pace. TrendAI™ proposes a six-pillar framework built to close that gap.

TrendAI™ Research

Agentic AI’s Shadow Pipeline: Mapping the Attack Surface Behind Trusted Workflows

As enterprises connect AI agents to cloud infrastructure and production workflows, the cloud-to-agent pipeline is becoming a primary attack surface. This article maps the risks for tech, media, and communications organizations and outlines detection and security best practices.

TrendAI™ Research

Driving Security at the Speed of AI Agents with NVIDIA DOCA

Agentic AI compresses exploit timelines from weeks to hours, and reactive security can't keep pace. TrendAI™, working with NVIDIA, delivers an isolated trust architecture purpose-built for AI infrastructure, hardening AI factories before attackers find a way in.

TrendAI™ Research

Edge Under Siege: How State-Sponsored Actors Exploit Your Perimeter

Edge devices have become a primary entry point for state-sponsored espionage, giving attackers a cheaper, faster path to network access, credential theft, and traffic interception. Our report examines the threat landscape, economics, and actor activity driving this shift, along with what CISOs and security leaders can do to respond.

TrendAI™ Research

Ransomware Spotlight: Agenda

Agenda has rapidly grown into one of the most prolific and dangerous ransomware operations, leveraging advanced techniques, cross-platform variants, and alliances with other major threat groups. Its aggressive double-extortion model and expanding victim base across critical industries make it a serious enterprise risk that demands proactive detection and defense.

TrendAI™ Research

Spam Campaign Abuses Atlassian Jira, Targets Government and Corporate Entities

We uncover how a campaign used Atlassian Jira Cloud to launch automated and targeted spam campaigns, exploiting trusted SaaS workflows to bypass security controls.

TrendAI™ Research

Trend Micro's Pivotal Role in INTERPOL's Operation Sentinel: Dismantling Digital Extortion Networks Across Africa

Continuing a Legacy of Successful Collaboration

TrendAI™ Research

What Cyber Defenders Really Think About AI Risk

Learn how Trend Micro's 2025 Trend Micro Defenders Survey Report highlights current AI-related cybersecurity priorities and where security professionals use AI to their advantage.

TrendAI™ Research

AI Security Starts Here: The Essentials for Every Organization

AI’s rapid growth brings new risks as well as opportunities. Strong security foundations are essential to ensure innovation remains safe, compliant, and resilient.

TrendAI™ Research

Ransomware Spotlight: DragonForce

DragonForce, a Ransomware-as-a-Service group first observed in 2023, rose to greater prominence in 2025 after a series of notable attacks linked to the group. Despite its unclear origins, what is evident is its rapid evolution and its aggressive, affiliate-driven model, marking it as a rising threat to watch out for.

TrendAI™ Research

Lessons in Resilience from the Race to Patch SharePoint Vulnerabilities

In this article, Trend Micro discusses how the fast-moving attacks using CVE-2025-53770 and CVE-2025-53771 have underscored the essential role of virtual patching and reliable intelligence in protecting organizations against evolving threats.

TrendAI™ Research

The Future of Social Engineering

Social engineering is a tactic that, at its core, creates a false narrative to exploit a victim’s credulity, greed, curiosity, or any other very human characteristics. Attackers continue to enhance existing social engineering and use new technologies.

TrendAI™ Research

Ransomware Spotlight: Water Ouroboros

Water Ouroboros (aka Hunters International) is a Ransomware-as-a-Service (RaaS) group that first emerged in October 2023. It is suspected to be a possible spin-off of Hive ransomware, which had its activities disrupted by the Federal Bureau of Investigation (FBI) in January 2023.

TrendAI™ Research

Ransomware Spotlight: Ransomhub

RansomHub is a young Ransomware-as-a-Service (RaaS) group tracked by Trend Micro as Water Bakunawa. Despite being a young ransomware group first detected in February 2024, RansomHub moves boldly by targeting larger enterprises more likely to pay ransoms.

TrendAI™ Research

Unleashing Chaos: Real World Threats Hidden in the DevOps Minefield

Threat actors are actively looking for exposed .env files. These files have become ticking bombs deeply rooted inside DevOps practices. Our research paper uncovers the hidden dangers in DevOps using real-world examples.

TrendAI™ Research

Ransomware Spotlight: INC

INC ransomware has been observed to exploit CVE-2023-3519 and uses HackTool.Win32.ProcTerminator.A for defense evasion and HackTool.PS1.VeeamCreds for credential access in its different attack chains.

TrendAI™ Research

The Illusion of Choice: Uncovering Electoral Deceptions in the Age of AI

Elections are the cornerstone of modern democracy, an exercise where a populace expresses its political will through the casting of ballots. But as electoral systems adopt and embrace technology, this introduces significant cybersecurity risks, not only to the infrastructure supporting an election but also to the people lining up in polling booths.

TrendAI™ Research

Rising From the Underground: Hacktivism in 2024

We have been looking at the hacktivism landscape to help the United Nations Interregional Crime and Justice Research Institute (UNICRI) understand this cybercriminal phenomenon for their paper on the topic. The UNICRI paper was released today at a launch event held at the United Nations headquarters where we gave an overview on emerging trends in the underground.

TrendAI™ Research

Phobos Emerges as a Formidable Threat in Q1 2024, LockBit Stays in the Top Spot: Ransomware in Q1 2024

The landscape of ransomware attacks in the first quarter of 2024 presents new insights and shifts in tactics among cybercriminal groups. This report shows key players, targeted sectors, and geographic distributions of attacks by ransomware groups, both notorious and relatively new.

TrendAI™ Research

Ransomware Spotlight: LockBit

The LockBit intrusion set, tracked by Trend Micro as Water Selkie, has one of the most active ransomware operations today. With LockBit’s strong malware capabilities and affiliate program, organizations should keep abreast of its machinations to effectively spot risks and defend against attacks.

TrendAI™ Research

Ransomware Spotlight: 8Base

Despite positioning themselves as penetration testers, 8Base ransomware threat actors profit off their victims that are significantly comprised of small businesses. In this feature, we investigate how the gang operates to gain insights on how organizations can protect systems better from compromises that could result in financial loss.  

TrendAI™ Research

Rise in Active RaaS Groups Parallel Growing Victim Counts: Ransomware in 2H 2023

We cover the key trends that defined the ransomware threat landscape in the second half of 2023. Data from RaaS and extortion groups’ leak sites, open-source intelligence (OSINT) research, and the Trend Micro telemetry shows that LockBit, BlackCat, and Clop continued to rank among the active RaaS and extortion groups with the highest victim counts during this period.

TrendAI™ Research

Apache APISIX In-the-wild Exploitations: An API Gateway Security Study

This article focuses on the Apache APISIX API gateway and its security implications.

TrendAI™ Research

Ransomware Spotlight: Rhysida

The threat actors behind the Rhysida ransomware targeted multiple industries by posing as a cybersecurity team that offered to help its victims identify security weaknesses in their networks and systems. Although the group’s activity was first observed back in May 2023, its leak site was established as early as March 2023. Like other ransomware groups, it employs double extortion tactics to pressure its victims into paying a ransom demand in Bitcoin.

TrendAI™ Research

Rising Security Weaknesses in the Automotive Industry and What It Can Do on the Road Ahead

VicOne’s annual cyberthreat landscape report gives an idea of the coming reality of cyberthreats to modern cars. A chief concern is the vulnerabilities that could spell new risks to the connected vehicle ecosystem.

TrendAI™ Research

Ransomware Spotlight: Trigona

After the shutdown of its leak site in October, we look at how ransomware group Trigona operated during its period of activity and discuss how enterprises can fortify their defenses against similar threats.

TrendAI™ Research

Steering Clear of Security Blind Spots: What SOCs Need to Know

As technologies continue to evolve and expand, organizations experience a technological paradox: Their increasing interconnectivity means that they simultaneously become more distributed. Case in point, robust cloud and networking technologies support today’s widespread adoption of hybrid and remote work arrangements, allowing employees all over the globe to work remotely full time or at least part of the time.

TrendAI™ Research

Ransomware Spotlight: Akira

This report spotlights Akira, a novel ransomware family with highly experienced and skilled operators at its helm.

TrendAI™ Research

LockBit, BlackCat, and Clop Prevail as Top RAAS Groups: Ransomware in 1H 2023

We delve into three of the most active ransomware families that dominated the first half of 2023: LockBit, Clop, and BlackCat. This report features data from ransomware-as-a-service (RaaS) and extortion groups’ leak sites, Trend Micro’s open-source intelligence (OSINT) research, and the Trend Micro™ Smart Protection Network™, collected from Jan. 1 to June 30, 2023.

TrendAI™ Research

Cybersecurity Under Strain of SecOps Pain Points

In this first installment in our series on the challenges of the cybersecurity industry, we explore the underlying causes of the workforce gaps that have long plagued SOC teams.

TrendAI™ Research

Ransomware Spotlight: Play

Play is shaping up to be a player on the rise within the ransomware landscape, with its operators likely to continue using the ransomware in future. We take a deep dive into its operations and offer ways in which organizations can shore up their defenses against this emerging threat.

TrendAI™ Research

Unmasking Pig-Butchering Scams and Protecting Your Financial Future

This report delves into the nature of pig-butchering scams, how scammers carry out their operations, the new pig-butchering tactics we’ve observed in the wild, and what individuals can do to avoid falling for these fraudulent investments and dealing with massive amounts of debt.

TrendAI™ Research

Ransomware Spotlight: TargetCompany

We detail everything you need to know about TargetCompany, a ransomware family with different monickers, including the evolution of its attack flow as it cemented its place in the threat landscape.

TrendAI™ Research

Ransomware Spotlight: Royal

Backed by threat actors from Conti, Royal ransomware is poised to wreak havoc in the threat landscape, starting strong by taking a spot among the most prolific ransomware groups within three months since it was first reported. Combining new and old techniques and quick evolution, it is likely to remain a big player in the threat landscape in the future.

TrendAI™ Research

LockBit, BlackCat, and Royal Dominate the Ransomware Scene: Ransomware in Q4 2022

We discuss the essential features of the ransomware threat landscape in the fourth quarter of 2022. Our data reveals a key pattern throughout 2022: Established ransomware groups preferred to target small and midsize organizations in North America and Europe.

TrendAI™ Research

Ransomware Spotlight: Magniber

The Magniber ransomware initially targeted only Asian countries when it was first detected in 2017. However, it resurfaced in 2021 and continues to operate today with expanded targets around the globe. Magniber remains a significant player in the threat landscape, with malicious attackers likely to continue using the ransomware in future.

TrendAI™ Research

Ransomware Spotlight: Cuba

Cuba ransomware emerged on the scene with a spate of high-profile attacks in late 2021. Armed with an expansive infrastructure, impressive tools, and associated malware, Cuba ransomware is considered a significant player in the threat landscape, and is likely to remain so in the future through its continued evolution.

TrendAI™ Research

LockBit and Black Basta Are the Most Active RaaS Groups as Victim Count Rises: Ransomware in Q2 and Q3 2022

We discuss key trends in the ransomware threat landscape from April to September 2022. Data from RaaS and extortion groups’ leak sites, open-source intelligence (OSINT) research, and the Trend Micro™ Smart Protection Network™ points to LockBit, BlackCat, Black Basta, and Karakurt as the most active groups with the most victims.

TrendAI™ Research

Zero Trust: Enforcing Business Risk Reduction Through Security Risk Reduction

Unlike traditional legacy trust models where security is not always present in all cases, Zero Trust revolves around an ”always-on everywhere” approach.

TrendAI™ Research

Ransomware Spotlight: BlackCat

Known for its unconventional methods and use of advanced extortion techniques, BlackCat has quickly risen to prominence in the cybercrime community. As this ransomware group forges its way to gain more clout, we examine its operations and discuss how organizations can shore up their defenses against it.

TrendAI™ Research

Uncovering Security Weak Spots in Industry 4.0 CNC Machines

The technological leaps of the Fourth Industrial Revolution may have made production machinery more efficient, but these have also put manufacturers in the crosshairs of cybercriminals. Our research tackles the risks that computer numerical control (CNC) machines now face as they’re integrated into today’s networked factories.

TrendAI™ Research

Leaked Today, Exploited for Life: How Social Media Biometric Patterns Affect Your Future

The photos, videos, and audio posts we put online expose sensitive biometric patterns that can be abused by cybercriminals. These patterns are virtually unchangeable and can be used now or in future attacks.

TrendAI™ Research

Bridging Security Gaps in WFH and Hybrid Setups

Remote and hybrid workplaces are now the norm. We highlight some risks and threats to these setups and detail recommendations for organizations to keep their diffused labor pool secure.

TrendAI™ Research

Connecting Taidoor’s Dots: Earth Aughisky Over The Last 10 Years

Our research on APT group Earth Aughisky (aka Taidoor) lists the observed malware, connections, and developments attributed to the group. We also include our insights on the possible implications of changes in the organization's activities for their current and future victims.

TrendAI™ Research

PII Leaks and Other Risks From Unsecure E-Commerce APIs

Our research takes an in-depth look at the security flaws that we found in the logistics API implementation of e-commerce platforms that can potentially leak the private information of consumers.

TrendAI™ Research

Ransomware Spotlight: Black Basta

A relative newcomer in 2022, the Black Basta ransomware group has wasted no time making a name for itself by upgrading its toolset and racking up its victim count around the world mere months since its ransomware was first detected. Learn more about this new ransomware and fortify your organization’s defenses against this threat.

TrendAI™ Research

Looking Into the Void: Probing a Top Bulletproof Hosting Service

Cybercriminal groups cannot operate independently. To keep their operations up and running, they need specific services provided by third parties. We investigate one such business that has been integral to the activities of a number of high-profile gangs.

TrendAI™ Research

Metaworse? The Trouble with the Metaverse

Innovators are diving into a new and immersive virtual space, but with new technology comes new threats. We bring forward possible problematic issues that metaverse pioneers should be wary of.

TrendAI™ Research

Ransomware Spotlight: BlackByte

BlackByte is a ransomware group that has been building a name for itself since 2021. Like its contemporaries, it has gone after critical infrastructure for a higher chance of getting a payout. What techniques sets it apart?

TrendAI™ Research

LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022

This report delves into the ransomware threat landscape of the first quarter of 2022, with a focus on the three most successful ransomware families and the types of industries and organizations that were affected by their attacks.

TrendAI™ Research

Ransomware Spotlight: RansomEXX

RansomEXX is a ransomware variant that gained notoriety after a spate of attacks in 2020 and continues to be active today. With its targeted nature and history for choosing high-profile victims, we shine our spotlight on RansomEXX to reveal its tactics, techniques, and procedures.

TrendAI™ Research

Analyzing the Data Distribution Service (DDS) Protocol for Critical Industries

The Data Distribution Service (DDS) standard drives thousands of systems every day as a middleware component for machine-to-machine communication with real-time requirements.

TrendAI™ Research

Ransomware Spotlight: AvosLocker

AvosLocker is a relatively new ransomware variant that sports the staples of modern ransomware, namely a layered extortion scheme that begins with stolen data. We shed light on this emerging ransomware family and its key techniques.

TrendAI™ Research

Probing the Activities of Cloud-Based Cryptocurrency-Mining Groups

Our research into cloud-based cryptocurrency mining sheds light on the malicious actor groups involved in this space, their ongoing battle for cloud resources, and the actual extent of the impact of their attacks.

TrendAI™ Research

Ransomware Spotlight: Hive

Hive ransomware is one of the new ransomware families in 2021 that poses significant challenges to enterprises worldwide. We take an in-depth look at the ransomware group’s operations and discuss how organizations can bolster their defenses against it.

TrendAI™ Research

Keeping a Close Watch: Trend Micro Specialized Cybersecurity Report for Latin America and the Caribbean

In collaboration with the Cybersecurity Program of OAS/CICTE, we examine the cybersecurity challenges affecting member states of the OAS. These issues include ransomware and active attacks, threats related to remote work, and the risks brought about by the adoption of new technologies.

TrendAI™ Research

Ransomware Spotlight: Clop

We take a closer look at the operations of Clop, a prolific ransomware family that has gained notoriety for its high-profile attacks. We review this ransomware group’s constantly changing schemes and discuss how companies can shore up defenses against this threat.

TrendAI™ Research

Can You Rely on OTPs? A Study of SMS PVA Services and Their Possible Criminal Uses

SMS PVA services allow their customers to create disposable user profiles or register verified accounts on many popular platforms. Unfortunately, criminals can misuse these services to conduct fraud or other malicious activities.

TrendAI™ Research

Hidden Scams in Malicious Scans: How to Use QR Codes Safely

The popularity of QR codes has created fertile ground for malicous actors to spruce up their malware tool kit for scams that steal not only personal information but also hard-earned assets that are impossible to recover once lost. We take a closer look at the different QR code-related scams and provide helpful tips on how to use QR codes safely.

TrendAI™ Research

Ransomware Spotlight: REvil

Now that the reign of REvil has come to an end, it's time to regroup and strategize. What can organizations learn from REvil’s tactics? We review the rise, downfall, and future of its operations using insights into the group's arsenal and inner inner workings.

TrendAI™ Research

Addressing Cloud-Related Threats to the IoT

This article explores the major cloud-related security threats to the IoT and discusses recommendations to help address them Some pointers on how you can improve the security of your IoT-cloud infrastructure also follows.

TrendAI™ Research

Ransomware Spotlight: Conti

Assumed to be the successor of the Ryuk ransomware, Conti is currently one of the most notorious active ransomware families used in high-profile attacks. Know all about this ransomware family and protect your company against this threat.

TrendAI™ Research

Investigating the Emerging Access-as-a-Service Market

We examine an emerging business model that involves access brokers selling direct access to organizations and stolen credentials to other malicious actors.

TrendAI™ Research

Examining Erratic Modern Ransomware Activities: Ransomware in Q3 2021

This latest report examines the landscape of ransomware families, both legacy and more modern threats, in the third quarter of 2021. Our tracking and investigation covered the families themselves and the types of industries and enterprises that were targeted.

TrendAI™ Research

The Most Common Cloud Misconfigurations That Could Lead to Security Breaches

Using Trend Micro Cloud One™ – Conformity data, we looked at the top 10 Amazon Web Services (AWS) and Microsoft Azure services with the highest misconfiguration rates with regard to the implementation of Cloud Conformity rules.

TrendAI™ Research

Modern Ransomware Shakes Up Banking, Government, Transportation Sectors in 1H 2021

Read about the impact of ransomware to critical industries in 1H, how modern ransomware operators gain initial access to organizations, and what decision-makers can do to defend against this menacing threat.

TrendAI™ Research

How to Secure Smart Home IoT Devices, Routers, and Smart Speakers

Smart TVs, smart refrigerators, smart cameras, and other smart devices make life at home convenient, but if left unguarded, they can inadvertently expose homes to risks. This infographic shows basic recommendations for securing these devices.

TrendAI™ Research

Zloader Campaigns at a Glance

Our infographic provides a quick and comprehensive overview of Zloader, which has been involved in numerous campaigns over the past few years.

TrendAI™ Research

IoT and Ransomware: A Recipe for Disruption

Ransomware can impact industrial operations in the bid to cause disruptions. Organizations need to reevaluate the security of their IoT environments in the face of such a threat.

TrendAI™ Research

A Roadmap to Secure Connected Cars: Charting the WP.29's UN Regulation No. 155

As connected cars become more commonplace, the UN Regulation No. 155 sets guidelines to ensure cybersecurity in vehicles. This research assesses the risks of its highlighted attack vectors and looks beyond its scope to identify top priorities.

TrendAI™ Research

IoT Security Issues, Threats, and Defenses

As the IoT continues to influence more environments and settings, we review what IoT security is and why it remains essential today.

TrendAI™ Research

TeamTNT Activities Probed: Credential Theft, Cryptocurrency Mining, and More

Our research sheds light on the tools and techniques used by TeamTNT and the potential impact of the group’s sundry malicious activities.

TrendAI™ Research

Trends and Shifts in the Underground N-Day Exploit Market

Our two-year research provides insights into the life cycle of exploits, the types of exploit buyers and sellers, and the business models that are reshaping the underground exploit market.

TrendAI™ Research

2020 Report: ICS Endpoints as Starting Points for Threats

ICS endpoint security has become more important as the interconnection between IT and OT continues to grow. Our research shares the status of global industrial systems in terms of security against both known and new threats that hound ICS endpoints.

TrendAI™ Research

Islands of Telecom: Risks in IT

Using an island resort analogy, we detail sample scenarios and potential risks of telecommunications IT for organizations and telecommunications companies, along with our recommendations.

TrendAI™ Research

Modern Ransomware's Double Extortion Tactics and How to Protect Enterprises Against Them

Modern ransomware like Nefilim present new challenges and security concerns for enterprises across the world. How do these new families differ from traditional ransomware? And what can organizations do to mitigate risks?

TrendAI™ Research

The Transition to 5G: Security Implications of Campus Networks

The 4G/5G campus network demonstrates the growing role of telecom technologies in different industries. Organizations and IT/OT experts need to keep up with these changes and consider their security implications.

TrendAI™ Research

Security for Entertainment IoT

The IoT has opened new avenues for creating and consuming media and entertainment. To fully benefit from these innovations, users must be aware of and deal with the risks that devices could bring into their homes.

TrendAI™ Research

The Nightmares of Patch Management: The Status Quo and Beyond

We discuss the challenges that organizations face in managing endpoint and server patches.

TrendAI™ Research

Return to Sender: Preventing Ransomware While Working From Home

Many employees have set up makeshift work spaces in their homes. This could leave them more susceptible to ransomware attacks that take advantage of vulnerabilities in unsecured spaces.

TrendAI™ Research

Security 101: Protecting Serverless and Container Applications with RASP (Runtime Application Self-Protection)

This article zeroes in on certain security considerations that developers need to know and the ways that they can build the best defense for container-based and serverless applications through runtime application self-protection (also known as RASP).

TrendAI™ Research

A Security Guide to IoT-Cloud Convergence

The integration of the IoT and cloud computing poses new possibilities for industries. It is important not to overlook their respective security risks and the measures to take against them when the two technologies converge.

TrendAI™ Research

Securing IoT Apps

Many work-from-home employees use devices for personal and business purposes in home networks that are not as secure as that of the office. This article discusses the threats to unsecure IoT apps and provides ways to secure them.

TrendAI™ Research

Navigating Gray Clouds: The Importance of Visibility in Cloud Security

The big move to the cloud has already happened for majority of enterprises and organizations who are invested in providing unhampered, future-proof services. But how can they prioritize visibility in a cloud-first world?

TrendAI™ Research

Exploiting AI: How Cybercriminals Misuse and Abuse AI and ML

We discuss the present state of the malicious uses and abuses of AI and ML and the plausible future scenarios in which cybercriminals might abuse these technologies for ill gain.

TrendAI™ Research, United Nations Interregional Crime and Justice Research Institute (UNICRI), Europol’s European Cybercrime Centre (EC3)

Malicious Actors Target Comm Apps such as Zoom, Slack, Discord

Communication apps have caught the eye of malicious actors who are always looking to integrate new techniques in their malicious activities.

TrendAI™ Research

COVID-19 Used in Malicious Campaigns

Threat actors take advantage of the spread of COVID-19 for malicious campaigns. Goods and services related to the virus also appear in underground marketplaces and cybercriminal forums.

TrendAI™ Research

Ryuk 2020: Distributing Ransomware via TrickBot and BazarLoader

Starting this year, Ryuk began using another dropper called BazarLoader (also known as BazarBackdoor), which is primarily distributed via phishing emails that contain either malicious attachments or links to websites that host malware.

TrendAI™ Research

Supply Chain Attacks in the Age of Cloud Computing: Risks, Mitigations, and the Importance of Securing Back Ends

A critical asset that enterprises should give careful security consideration to is their back-end infrastructure which, if compromised, could lead to supply chain attacks.

TrendAI™ Research

Operation Earth Kitsune: Tracking SLUB’s Current Operations

A watering hole campaign we dubbed as Operation Earth Kitsune is spying on users’ systems through compromised websites. Using SLUB and two new malware variants, the attacks exploit vulnerabilities including those of Google Chrome and Internet Explorer.

TrendAI™ Research

CSO Insights: DataBank’s Mark Houpt on Looking Beyond Securing Infrastructures in the New Normal

Mark Houpt, Chief Information Security Officer of DataBank, provides security insights that highlight challenges and learnings from both corporate and customer perspectives.

TrendAI™ Research

Safe and Smart Connections: Securing IoT Networks for Remote Setups

We re-examine the role of networks in IoT security during this period of work-from-home arrangements and growing reliance on smart devices.

TrendAI™ Research

Addressing Threats Like Ryuk via Trend Micro XDR

Our infographic shows how Trend Micro XDR is designed to combat threats like Ryuk using machine learning and analytics to correlate various events across multiple layers.

TrendAI™ Research

Mispadu Banking Trojan Resurfaces

Recent spam campaigns leading to URSA/Mispadu has been uncovered. This attack targets systems with Spanish and Portuguese as system languages.

TrendAI™ Research

Securing Enterprise Security: How to Manage the New Generation of Access Control Devices

Given the increasing use by enterprises of contactless security solutions, the security of the devices that themselves are meant to control access to premises should be of prime consideration.

TrendAI™ Research

CSO Insights: Ricoh USA’s David Levine on Employing a Cloud- and Cybersecurity-First Strategy

David Levine, Vice President of Corporate and Information Security and CSO for Ricoh USA, Inc., shares his thoughts on reinforcing a security mindset in the organization and how a cloud-first strategy helps enable their operations in the "new normal"

TrendAI™ Research

The Cybersecurity Blind Spots of Connected Cars

Connected cars face a range of ever-increasing and ever-progressing cyberthreats. Our forward-looking research provides an in-depth examination of the risks connected cars might run into.

TrendAI™ Research

Shedding Light on Security Considerations in Serverless Cloud Architectures

Serverless computing is not immune to risks and threats. Our security research provides a comprehensive analysis of the possible attack scenarios that could compromise serverless services and deployments.

TrendAI™ Research

Lost in Translation: When Industrial Protocol Translation goes Wrong

This research paper looks at protocol gateways, which translate various protocols used by different industrial devices and machinery, and provides insight into the security issues and vulnerabilities found in these devices as well as ways to secure them.

TrendAI™ Research

Unveiling the Hidden Risks of Industrial Automation Programming

The legacy programming environments of widely used industrial machines could harbor virtually undetectable vulnerabilities and malware. Our security analysis of these environments reveals critical flaws and their repercussions for smart factories.

TrendAI™ Research, Politecnico di Milano

Application Security 101

Security issues often arise as a result of applications being rushed for deployment without adequate checks and protections. What are the top security risks to applications and what can organizations do to secure their DevOps pipeline?

TrendAI™ Research

Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted

In this report, we discussed new ransomware family Avaddon, updates on techniques of other ransomware, and our latest figures.

TrendAI™ Research

Caught in the Crossfire: Defending Devices From Battling Botnets

As cybercriminals compete for dominance in their bid to create powerful botnets, users can make their own stand against warring sides by understanding how botnet malware works and securing their devices.

TrendAI™ Research

Patch Now: F5 Vulnerability with CVSS 10 Severity Score

F5 Networks urges users to patch their BIG-IP networking systems ASAP, after the provider disclosed two vulnerabilities, namely CVE-2020-5902 and CVE-2020-5903.

TrendAI™ Research

Malicious Chrome Extensions, Domains Used to Steal User Data

Browser extensions and malicious domains were used in a campaign that aims to track user activity and data.

TrendAI™ Research

CSO Insights: Liggett Consulting’s Mark Liggett on Connectivity and Visibility in Securing Remote Work

Mark Liggett, CEO of Liggett Consulting and longtime IT and cybersecurity key player, sits down with Trend Micro to share his thoughts on the importance of taking into account connectivity and visibility in securing WFH setups.

TrendAI™ Research

ISO/SAE 21434: Securing Tomorrow's Connected Cars

The upcoming standard sets the tone for future mandates on the cybersecurity of connected cars.

TrendAI™ Research

Cyberattacks from the Frontlines: Incident Response Playbook for Beginners

In the event of a cyberattack a strong incident response plan can get a business running again with minimal damages. Understand the response process in this playbook.

TrendAI™ Research

Millions of IoT Devices Affected by Ripple20 Vulnerabilities

The internet of things (IoT) landscape will be critically affected by the recently discovered Ripple20 vulnerabilities. This group of 19 bugs could potentially hit millions of IoT devices across many different industries.

TrendAI™ Research

Updated Analysis on Nefilim Ransomware’s Behavior

Through investigation of recent cases, we have amassed more information on how Nefilim ransomware operates. Some notable updates are the use of other tools and the description of events that occur within the attack phases.

TrendAI™ Research

Lemon Duck Cryptominer Spreads through Covid-19 Themed Emails

We have come across a PowerShell script (mailer script) that distributes the Lemon Duck cryptominer through a new propagation method: Covid-19-themed emails with weaponized attachments.

TrendAI™ Research

No Entry: How Attackers Can Sneak Past Facial Recognition Devices

Access control devices that use facial recognition manage entry and exit into an enterprise’s premises. They are essentially the first line of defense for many businesses, but are they secure?

TrendAI™ Research

Smart Yet Flawed: IoT Device Vulnerabilities Explained

Are your smart devices vulnerable? Here are common vulnerabilities found in IoT devices and how to secure against them.

TrendAI™ Research

Qakbot Resurges, Spreads through VBS Files

We have seen events that point to the resurgence of Qakbot, a multi-component, information-stealing threat first discovered in 2007.

TrendAI™ Research

CSO Insights: SBV’s Ian Keller on the Challenges and Opportunities of Working Remotely

Ian Keller, Chief Security Officer of SBV Services in South Africa, recently sat down with Trend Micro and shared his thoughts on how his organization is coping with the current pandemic.

TrendAI™ Research

Phishing Site Uses Netflix as Lure, Employs Geolocation

A phishing site was found using a spoofed Netflix page to harvest account information, credit card credentials, and other PII.

TrendAI™ Research

Cloud Security: Key Concepts, Threats, and Solutions

When it comes to cloud computing security, or simply, cloud security, what are the builders’ responsibilities? How can developers and administrators ensure cloud security? This primer discusses the key concepts of cloud security and which areas need to be protected using flexible and comprehensive security solutions. 

TrendAI™ Research

Threats and Consequences: A Security Analysis of Smart Manufacturing Systems

Through a thorough analysis of an actual smart manufacturing environment, our in-depth security research explores several attack vectors that could be used by threat actors to launch unconventional attacks on smart manufacturing systems.

TrendAI™ Research

Excel Files with Hidden Sheets Target Users in Italy

A spam campaign using emails that have Excel file (.xls) attachments has been seen circulating and targeting users in Italy.

TrendAI™ Research

Security 101: How Fileless Attacks Work and Persist in Systems

Many attackers are switching from file-based malware to memory-based attacks to improve their stealth. “Fileless,” “zero-footprint,” or “living off the land” threats use legitimate applications to carry out malicious activities.

TrendAI™ Research

Group Behind TrickBot Spreads Fileless BazarBackdoor

A campaign propagates a new malware named ‘BazarBackdoor’, a fileless backdoor reportedly created by the same threat actors behind TrickBot.

TrendAI™ Research

Know the Symptoms: Protect Your Devices While Working From Home

Is your work-from-home set up secure? Here are a few signs to know if your devices have been hacked or infected with malware.

TrendAI™ Research

Maze Ransomware Attacks US IT Firm

Maze ransomware, notorious for not just encrypting but for stealing victims’ data, attacks a US IT firm. The company sent emails to customers which include IP addresses and file hashes that have been linked to previous Maze attacks.

TrendAI™ Research

Nemty Ransomware Ceases Public Operations, Focuses on Private Schemes

Cybercriminals behind Nemty ransomware close down their Ransomware-as-a-Service (RaaS) operation as they zero in on private schemes. This is confirmed through a post in a Russian hacker forum.

TrendAI™ Research

How to Secure Video Conferencing Apps

Video conferencing apps provide many benefits, but they also present organizations with the challenge of ensuring that their employees — and the data they work with — remain secure when using these apps.

TrendAI™ Research

Undertaking Security Challenges in Hybrid Cloud Environments

As organizations make their move toward a more efficient and innovative future in the cloud, hybrid cloud environments pose several problems that can make or break their overall strategies.

TrendAI™ Research

“Twin Flower” Campaign Jacks Up Network Traffic, Downloads Files, Steals Data

Researchers detected the “Twin Flower” campaign that simulates increased clicks to boost network traffic, boosting SEO ranking and advertising revenue.

TrendAI™ Research

Misconfigured Docker Daemon API Ports Attacked for Kinsing Malware Campaign

A campaign targeted misconfigured Docker Daemon API ports through Kinsing malware.

TrendAI™ Research

Malicious Domains and Files Related to Zoom Increase, ‘Zoom Bombing’ on the Rise

Users of video conferencing app Zoom have been targeted using suspicious domains, malicious files, and ‘Zoom bombing’ as threat actors take advantage of work-from-home arrangements brought about by COVID-19.

TrendAI™ Research

Russian Investigators Bust Credit Card Fraud Ring

At least 25 people allegedly including a kingpin were arrested for card fraud by Russian federal investigators.

TrendAI™ Research

Mirai Updates: New Variant Mukashi Targets NAS Devices, New Vulnerability Exploited in GPON Routers, UPX-Packed FBot

Notorious IoT malware Mirai has seen a recent increase in updates as a new variant emerges and a new vulnerability is targeted.

TrendAI™ Research

Microsoft Alerts Users About Critical Font-related Remote Code Execution Vulnerability in Windows

An RCE vulnerability affecting Windows have been discovered, with Microsoft rating its severity as critical.

TrendAI™ Research

Nefilim Ransomware Threatens to Expose Stolen Data

New ransomware variant Nefilim is distributed through exposed Remote Desktop Protocol (RDP) and threatens to release stolen data to the public.

TrendAI™ Research

New Variant of Paradise Ransomware Spreads Through IQY Files

Paradise ransomware can now spread through Internet Query Files.

TrendAI™ Research

The IIoT Threat Landscape: Securing Connected Industries

As the use of IoT extends beyond the home and goes into the vast industrial landscape, the scale of threats likewise grows.

TrendAI™ Research

WordPress GDPR Plugin Vulnerable to Cross-Site Scripting Attacks

A WordPress GDPR plugin for managing cookies exposed sites to a vulnerability that allowed privilege escalation.

TrendAI™ Research

Nemty Ransomware Spreads via Love Letter Emails

Nemty ransomware was spread through love letter emails, complete with romantic email subjects and nothing but a winky emoticon in the email body.

TrendAI™ Research

Data of U.K. Train Commuters Leak from Misconfigured AWS Cloud Storage

An unsecured Amazon Web Services (AWS) cloud storage bucket leaked the data of commuters in the U.K. who use the free Wi-Fi in train stations.

TrendAI™ Research

Ransomware Hits U.S. Electric Utility

The Reading Municipality Light Department was attacked by ransomware.

TrendAI™ Research

PowerGhost Spreads Beyond Windows Devices, Haunts Linux Machines

The detected PowerGhost variant can remove anti-malware products, maintain persistence, and drop other components.

TrendAI™ Research

Cybercrime Group Uses G Suite, Physical Checks in BEC Scam

A cybercrime group named Exaggerated Lion uses GSuite request for checks coursed through check mules.

TrendAI™ Research

Plugin Leaves Nearly 100,000 WordPress Sites Vulnerable to Compromise

The ThemeGrill Demo Importer plugin was found to leave nearly 100,000 WordPress websites vulnerable to threats.

TrendAI™ Research

Stolen Credit Card Data Concealed through Fake Club Membership Cards

The fake cards, looking like club membership cards from major retail stores, have barcodes that hide credit card details.

TrendAI™ Research

Operation DRBControl: Uncovering a Cyberespionage Campaign Targeting Gambling Companies in Southeast Asia

The DRBControl campaign attacks its targets using a variety of malware and techniques that coincide with those used in other known cyberespionage campaigns.

TrendAI™ Research

Puerto Rico Loses Millions in Email Scam

The hacked email account of a finance employee was exploited to steal millions of dollars from the Puerto Rico government.

TrendAI™ Research

Fake Dating Apps Found as Top Source of Malware in Africa

Fake dating apps were cited as one of the most notable sources of #malware in Africa, with 7,000 attacks detected in 2019.

TrendAI™ Research

Emotet Now Spreads via Wi-Fi

Before, the Emotet malware mostly spread through spam campaigns. Now, it can also propagate via Wi-Fi.

TrendAI™ Research

Uncovering Risks in Ordinary Places: A Look at the IoT Threat Landscape

As the IoT continues to become more integrated into enterprise and home spaces, the threat landscape also expands. We look at the most significant threats and vulnerabilities in IoT devices on the edge of the network, within the network itself.

TrendAI™ Research

Misconfigured AWS S3 Bucket Leaks 36,000 Inmate Records

Over 30K records of US inmates were inadvertently exposed through a leaky AWS S3 cloud storage bucket.

TrendAI™ Research

Youtube, Twitter Hunt Down Deepfakes

In a quest to clamp down on synthetic and manipulated media, Youtube and Twitter ban deepfakes.

TrendAI™ Research

Trickbot, Emotet Use Text About Trump to Evade Detection

Trickbot and Emotet were concealed by using text from articles about #Trump and placing them in the file metadata.

TrendAI™ Research

Researchers Use Smart Light Bulbs to Infiltrate Networks

Researchers discovered a vulnerability in smart light bulbs that can allow hackers to install malware and infect other IoT devices.

TrendAI™ Research

Dynamic Challenges to Threat Detection and Endpoint Security — And How to Overcome Them

Advancements in technology continue to grow — and so do the techniques of cyberthreats. Learn how organizations can keep their evolving environments protected through dynamic and advanced security solutions.

TrendAI™ Research

Ryuk Ransomware Infects US Government Contractor

US government contractor Electronic Warfare Associates (EWA) was infected with Ryuk ransomware, compromising web servers and subsidiary websites.

TrendAI™ Research

New Extortion Campaign Threatens Victims of the 2015 Ashley Madison Breach

5 years after the Ashley Madison breach, cybercriminals still capitalize on the incident by introducing a new sextortion scheme.

TrendAI™ Research

Emotet Uses Coronavirus Scare in Latest Campaign, Targets Japan

Cybercriminals used the 2019-nCoV scare to trick people into downloading email attachments that carry the Emotet malware.

TrendAI™ Research

Over 30 Million Stolen Credit Card Records Being Sold on the Dark Web

Cybercriminals were found selling over 30 million credit card details from around 40K U.S. states and 100 countries.

TrendAI™ Research

3 Indonesian Hackers Arrested for Global Magecart Attacks, Other Members Still at Large

The Interpol, together with the Indonesian National Police, announced the arrest of three Indonesian men suspected of being behind Magecart attacks.

TrendAI™ Research

Google, Mozilla Crack Down on Malicious Extensions and Add-ons

Google indefinitely suspends extensions that use the Chrome Web Store payments while Mozilla bans 197 add-ons in a quest to halt fraudulent activities.

TrendAI™ Research

Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers

An unsecured Amazon S3 bucket was found leaking the data of more than 30,000 individuals. It was discovered to have exposed 85,000 files that included records with sensitive personally identifiable information (PII).

TrendAI™ Research

Malicious Script Plagues Over 2,000 WordPress Accounts, Redirects Visitors to Scam Sites

Over 2,000 WordPress sites were compromised by a malicious script that redirects visitors to scam sites, gains admin access, and installs fake plugins.

TrendAI™ Research

Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment

A new sextortion scheme threatens to expose nude videos supposedly captured via victims' mobile phones and home cameras.

TrendAI™ Research

Fake Company, Real Threats: Logs From a Smart Factory Honeypot

To determine threat actors' degree of knowledge in compromising a smart factory, we deployed our most elaborate honeypot to date. The incidents we observed show the kinds of attacks that can easily affect poorly secured manufacturing environments.

TrendAI™ Research

Hacker Publishes Credentials for Over 515,000 Servers, Routers, and IoT Devices

A hacker published a massive list of Telnet usernames and passwords for more than 515,000 servers, routers, and IoT devices.

TrendAI™ Research

Microsoft Releases Advisory on Zero-Day Vulnerability CVE-2020-0674, Workaround Provided

On January 17, Microsoft published an advisory (ADV200001) warning users about CVE-2020-0674, a remote code execution (RCE) vulnerability involving Microsoft’s Internet Explorer (IE) web browser.

TrendAI™ Research

Blocking A CurveBall: PoCs Out for Critical Microsoft-NSA Bug CVE-2020-0601

Security researchers have released PoCs for critical vulnerability CurveBall (CVE-2020-0601).

TrendAI™ Research

Mobile Banking Trojan FakeToken Resurfaces, Sends Offensive Messages Overseas from Victims’ Accounts

An updated version of mobile malware FakeToken was found sending massive numbers of offensive messages to foreign countries.

TrendAI™ Research

Texas School District Loses $2.3 Million to Phishing Scam, BEC

A Texas school district is investigating an email phishing attack after a series of transactions resulted in the loss of an estimated US$2.3 million.

TrendAI™ Research

Sodinokibi Ransomware Increases Yearend Activity, Targets Airport and Other Businesses

The Sodinokibi ransomware ended the year with a bang by launching a new round of attacks aimed at multiple organizations, including the Albany International Airport and the foreign exchange company Travelex.

TrendAI™ Research

Dymalloy, Electrum, and Xenotime Hacking Groups Set Their Targets on US Energy Sector

At least three hacking groups have been identified aiming to interfere with or disrupt power grids across the United States. Attempts in attacking the utilities industry are on the rise, according to a report on the state of industrial control systems (ICSs).

TrendAI™ Research

Patched Microsoft Access ‘MDB Leaker’ (CVE-2019-1463) Exposes Sensitive Data in Database Files

Researchers uncovered an information disclosure vulnerability (designated as CVE-2019-1463) affecting Microsoft Access, which occurs when the software fails to properly handle objects in memory.

TrendAI™ Research

Web Skimming Attack on Blue Bear Affects School Admin Software Users

A web skimming attack was used to target a school administration software that handles school accounting, student fees, and online stores for K-12 and other educational institutions.

TrendAI™ Research

Ransomware Recap: Clop, DeathRansom, and Maze Ransomware

As the new year rolls in, new developments in different ransomware strains have emerged. Here we discuss the different techniques that Clop, DeathRansom, and Maze ransomware use and the ways users and organizations can protect themselves against infection.

TrendAI™ Research

A MyKings Retrospective: Using the MITRE ATT&CK Matrix for Increased Visibility

We take a closer look at an incident involving the MyKings botnet to show how the MITRE ATT&CK framework helps with threat investigation.

TrendAI™ Research

Into the Battlefield: A Security Guide to IoT Botnets

We recap the history and recent campaigns of IoT botnets to help users defend against the different malware competing for control and resources of regular smart devices.

TrendAI™ Research

From SIMjacking to Bad Decisions: 5G Security Threats to Non-Public Networks

Our latest research explored threats to 5G connectivity — from SIMjacking, identity fraud, fake news, and poisoning machine learning rules to manipulating business decisions — and found that they can be addressed through an identity-based approach to security.

TrendAI™ Research

Cheats, Hacks, and Cyberattacks: Threats to the Esports Industry in 2019 and Beyond

Esports competitions continue to gain momentum, making the entities involved more attractive targets for cybercrime.

TrendAI™ Research

Defending Systems Against Cryptocurrency Miner Malware

A look into cryptocurrencies' state and how cybercriminals abuse miner malware to profit at the expense of legitimate businesses, how to find signs of infection, and recommendations to defend systems from its abuse.

TrendAI™ Research

The Cloud: What it is and what it's for

From powering video streaming, web-based apps, customer relationship management (CRM) systems, mobile banking, inventory, and big data analyses, the cloud is helping empower businesses of all sizes to focus on innovation rather than infrastructure.

TrendAI™ Research

Putting the Eternal in EternalBlue: Mapping the Use of the Infamous Exploit

In 2017, EternalBlue was the driving force behind one of the nastiest ransomware outbreaks on record. And despite available fixes, it is still being used by malware today—from ransomware to widespread cryptocurrency miners.

TrendAI™ Research

Security 101: Zero-Day Vulnerabilities and Exploits

A zero-day attack exploits an unpatched vulnerability. Until a patch becomes available, it is often a race between threat actors trying to exploit the flaw and vendors or developers rolling out a patch to fix it.

TrendAI™ Research

The Risks of Open Banking: Are Banks and their Customers Ready for PSD2?

Our research highlights the current and new risks that the financial industry will have to defend against, and predict how cybercriminals will abuse and attack Open Banking.

TrendAI™ Research

Texas Municipalities Hit by REvil/Sodinokibi Paid No Ransom, Over Half Resume Operations

Cybercriminals who held to ransom the files of 22 Texas local government units for a combined ransom amount of US$2.5 million did not get a single cent, according to Texas state officials.

TrendAI™ Research

Container Security in Six Steps

The complexity of container infrastructure, if not properly accounted for, can pose serious security risks. To minimize risks when building in containers, we came up with six steps that developers can follow.

TrendAI™ Research

Unusual CEO Fraud via Deepfake Audio Steals US$243,000 From UK Company

An unusual case of CEO fraud used a deepfake audio, an artificial intelligence (AI)-generated audio, and was reported to have conned US$243,000 from a U.K.-based energy company.

TrendAI™ Research

BEC Scam Costing Almost US$11 Million Leads to FBI Arrest of Nigerian Businessman

The CEO of the Invictus Group of Companies, Obinwanne Okeke, has reportedly been arrested by the FBI after he was accused of conspiracy to commit computer and wire fraud.

TrendAI™ Research

The Path to Secure DevOps Initiatives: Bridging the Gap Between Security and DevOps

In a survey commissioned by Trend Micro, majority of the respondents shared their concern for the risks in implementing DevOps. Learn why consulting IT security teams in the initiatives can help bridge gaps between production and security.

TrendAI™ Research

The Rising Tide of Credential Phishing: 2.4 Million Attacks Blocked by Trend Micro Cloud App Security in 2019 1H

Credential phishing continues to be a bane for organizations. In the first half of 2019, the Trend Micro™️ Cloud App Security™️ solution caught 2.4 million attacks of this type — a 59% increase from 1.5 million in the second half of 2018.

TrendAI™ Research

Report: Huge Increase in Ransomware Attacks on Businesses

According to a new report, ransomware attacks against businesses increased by 363% percent year-over-year. There has also been a greater number of ransomware attacks targeting different public sectors and local governments since the start of 2019.

TrendAI™ Research

Risks Under the Radar: Understanding Fileless Threats

Hackers use fileless threats to take advantage of existing applications and attack systems. Here we discuss noteworthy events, techniques, and best practices that can help identify fileless threats and defend against attacks.

TrendAI™ Research

Malicious Spam Campaign Uses ISO Image Files to Deliver LokiBot and NanoCore

A malicious spam campaign conducted in April used ISO image files to deliver the notorious LokiBot and NanoCore trojans.

TrendAI™ Research

Container Security: Examining Potential Threats to the Container Environment

The rise in adoption of containers means a greater need for security awareness. Our infographic details the various threats that container users could encounter at each stage of the development pipeline.

TrendAI™ Research

What You Need To Know About Tax Scams

Tax season is upon us (again), and so are IRS tax scammers. How prepared are you when it comes to filing your taxes and defending against IRS tax fraud? Learn more about these scams and how you can protect yourself.

TrendAI™ Research

Security in the Era of Industry 4.0: Dealing With Threats to Smart Manufacturing Environments

As manufacturing companies continue to adopt Industry 4.0, many environments could still be falling short on security with outdated systems, unpatched vulnerabilities, and unsecure files that leave them vulnerable to attacks.

TrendAI™ Research

Google and Facebook Fraudster Pleads Guilty to $100 million Scam

A business email compromise (BEC) scheme took more than $100 million from Facebook and Google. Legitimate-looking invoices, contracts and more fooled the two tech companies and they wired millions to the fraudsters over a period of years.

TrendAI™ Research

Global Telecom Crime Undermining Internet Security: Cyber-Telecom Crime Report

As the field of telecommunication continues to evolve, so should its security. Understanding its current threat landscape can help reduce the impact of crimes like telecom fraud and prepare us for future threats in the age of the IoT.

TrendAI™ Research, Europol’s European Cybercrime Centre (EC3)

What You Need to Know About the LockerGoga Ransomware

The systems of Norsk Hydro were reportedly struck by LockerGoga ransomware. Here's what you need to know about this threat and how to defend against it.

TrendAI™ Research

Examining Ryuk Ransomware Through the Lens of Managed Detection and Response

Trend Micro‘s Managed Detection and Response (MDR) and Incident Response teams investigated two separate Ryuk attacks with seemingly little in common with each other.

TrendAI™ Research

Securing Smart Homes and Buildings: Threats and Risks to Complex IoT Environments

The evolution of smart homes and smart buildings into complex IoT environments reflects the continuing developments in home and industrial automation. Security should not be left behind as increased complexity also means new threats and risks.

TrendAI™ Research

Attacks Against Industrial Machines via Vulnerable Radio Remote Controllers: Security Analysis and Recommendations

Radio frequency (RF) technology is being used in operations to control various industrial machines. However, the lack of implemented security in RF communication protocols could lead to production sabotage, system control, and unauthorized access.

TrendAI™ Research

Ransomware MongoLock Immediately Deletes Files, Formats Backup Drives

We found a wave of MongoLock ransomware attacks that immediately deletes important files upon infection and scans the backup drives for data deletion.

TrendAI™ Research

Security 101: Defending Against Fileless Malware

Fileless threats aren’t as visible compared to traditional malware and employ a variety of techniques to stay persistent. Here's a closer look at how fileless malware work and what can be done to thwart them.

TrendAI™ Research

MQTT and CoAP: Security and Privacy Issues in IoT and IIoT Communication Protocols

We looked into MQTT brokers and CoAP servers around the world to assess IoT protocol security. Learn how to prevent risks and secure machine-to-machine (M2M) communications over MQTT and CoAP in our research.

TrendAI™ Research, Eurecom and Politecnico di Milano (POLIMI)

Hacker Infects Node.js Package to Steal from Bitcoin Wallets

A Node.js module with nearly two million downloads a week was compromised after the library was injected with malicious code programmed to steal bitcoins in wallet apps.

TrendAI™ Research

Cryptocurrency-mining Malware Targets Linux Systems, Uses Rootkit for Stealth

We recently encountered a cryptocurrency-mining malware affecting Linux systems. It is notable for being bundled with a rootkit component that hides the malicious process’ presence from monitoring tools.

TrendAI™ Research

Critical Infrastructures Exposed and at Risk: Energy and Water Industries

Securing energy and water should remain top priority in the continuing integration of the industrial internet of things in these critical sectors.

TrendAI™ Research

Evolution of Cybercrime

To move forward, we need to look into the past to figure out what the best course of action is. Take a trip down memory lane with this infographic to see how far we've come in securing the digital world.

TrendAI™ Research

Virtual Patching: Patch Those Vulnerabilities before They Can Be Exploited

The average organization takes over 30 days to patch operating systems and software, and longer for more complex business applications and systems. This infographic shows how virtual patching solutions can help mitigate threats from vulnerabilities.

TrendAI™ Research

LoJax UEFI Rootkit Used in Cyberespionage

Security researchers came across a Unified Extensible Firmware Interface (UEFI) rootkit in the wild being used for cyberespionage. Named LoJax, the rootkit is reportedly packaged with other tools that modifies the system’s firmware to infect it with malware.

TrendAI™ Research

Data Breaches 101: How They Happen, What Gets Stolen, and Where It All Goes

Data breaches take time and a lot of effort to pull off, but successful breaches can affect not just organizations, but also millions of people. Learn what a data breach is, what types of data is usually stolen, and what happens to stolen data.

TrendAI™ Research

Over 200,000 MikroTik Routers Compromised in Cryptojacking Campaign

Security researchers uncovered a cryptojacking campaign that exploits a vulnerability in MikroTik routers to inject a malicious version of Coinhive. Here’s what you need to know.

TrendAI™ Research, TrendAI Rese

Fileless Malware PowerGhost Targets Corporate Systems

A new fileless malware utilizes Powershell and EternalBlue via WMI for propagation, infecting workstations and servers connected to a local server with a cryptocurrency miner and a DDos tool. Significant infections have been detected in North America and Europ

TrendAI™ Research

FBI Report: Global BEC Losses Exceeded US$12 Billion in 2018

The Federal Bureau of Investigation (FBI) issued a public service announcement (PSA) regarding the continued increase of Business Email Compromise (BEC) scams, which total global losses have already reached over US$12 billion in 2018.

TrendAI™ Research

Security by Design: A Checklist for Safeguarding Virtual Machines and Containers

Here are some considerations and best practices that developers, IT operations professionals, and system administrators should take into account in securing the infrastructures that power the applications they use.

TrendAI™ Research

The Rise and Fall of Scan4You

We delved into the rise and fall of Scan4You, the largest counter antivirus service in the underground, its operators, and the ties that bind them to other cybercriminals.

TrendAI™ Research

Exposed Video Streams: How Hackers Abuse Surveillance Cameras

IP surveillance cameras provide certain conveniences, but control of this can fall into the wrong hands. What threats are there for these devices and what can be done to minimize risk?

TrendAI™ Research

Curbing the BEC Problem Using AI and Machine Learning

Due to BEC’s evolving and treacherous nature, run-of-the-mill best practices and security solutions have become weak to withstand attacks. Find out how advanced solutions that utilize artificial intelligence and machine learning help in defending against BEC.

TrendAI™ Research

Serverless Applications: What They Mean in DevOps

Analysis of over 1,000 open-source serverless applications revealed that 21% of them have critical vulnerabilities or were misconfigured. What does this mean for DevOps?

TrendAI™ Research

Exposed Devices and Supply Chain Attacks: Overlooked Risks in Healthcare Networks

This research examines the oft-overlooked infection vectors in today’s healthcare networks: exposed medical devices and supply chain attacks.

TrendAI™ Research

Tesla and Jenkins Servers Fall Victim to Cryptominers

Vulnerable enterprise servers are being compromised by individuals or groups looking for resources to mine cryptocurrency. The latest victims are automobile-maker Tesla and users of Jenkins servers.

TrendAI™ Research

North Korean Hackers Allegedly Exploit Adobe Flash Player Vulnerability (CVE-2018-4878) Against South Korean Targets

In a security alert posted on its website on January 31, The South Korean Computer Emergency Response Team (KR-CERT) warned of a zero-day vulnerability in Adobe Flash player that could be maliciously exploited.

TrendAI™ Research

Digital Vandals: Exploring the Methods and Motivations behind Web Defacement and Hacktivism

Activists have traditionally used physical signs and catchy slogans to promote their political agenda, but the internet offers a significantly broader audience, so these activities have since moved online.

TrendAI™ Research

Delving into the World of Business Email Compromise (BEC)

We looked at BEC-related incidents over a span of nine months to see emerging and present trends from BEC incidents, examine the tools and techniques used by cybercriminals, and analyze the data to give us an overall picture of what BEC looks like today.

TrendAI™ Research

Meltdown and Spectre Intel Processor Vulnerabilities: What You Need to Know

Microsoft, Linux, Google, and Apple started rolling out patches addressing design flaws in processor chips that security researchers named Meltdown and Spectre. What are they, and how can they affect users?

TrendAI™ Research

Data on 123 Million US Households Exposed Due to Misconfigured AWS S3 Bucket

A year that saw major data breaches, including some notable ones from companies like Uber and Equifax, just saw another breach that will likely rank as among 2017’s most notable incidents.

TrendAI™ Research

Cities Exposed in Shodan

Western European, UK, French, German, and US cities exposed. Are your connected devices searchable on the internet? Find out what you are risking.

TrendAI™ Research

Uber Breach Exposes the Data of 57 Million Drivers and Users

In a highly publicized data breach incident, rideshare application Uber announced that the personal information of 57 million customers and drivers were potentially compromised in October 2016.

TrendAI™ Research

Coinhive Miner Emerges as the 6th Most Common Malware

A new report reveals Coinhive's reach after it ranked the coin miner as the 6th most common malware in the world.

TrendAI™ Research

High-Tech Highways

Intelligent Transportation Systems are slowly being adopted all over the world. Securing the future of transportation from cyberattacks should be a top priority.

TrendAI™ Research

Best Practices: Securing Your Mobile Device

The number of mobile phone users around the world is projected to exceed the five billion mark by 2019. Since cybercriminals usually cast wide nets to reach more potential victims, mobile users should protect their devices early on to defend against threats.

TrendAI™ Research

The Middle Eastern and North African Underground: Where Culture and Cybercrime Meet

The Middle Eastern and North African (MENA) underground is characterized by its ironic mix of ideology and felony. We take a look at its inner workings, available wares, and the unique sense of brotherhood shared by its players.

TrendAI™ Research

Best Practices: How to Secure Your Social Media Accounts

The leading social media platforms have billions of users, and the number keeps getting bigger every year. Learn how to keep your social media accounts secure.

TrendAI™ Research

Red Alert 2.0 Android Trojan Spreads Via Third Party App Stores

A spate of new attacks targeting the Android operating system have been discovered using a banking trojan named Red Alert 2.0.

TrendAI™ Research

Best Practices: Deploying an Effective Firewall

There is no panacea for building a hacker-proof firewall, but there are things that can be done to streamline its management. These best practices provide a starting point for managing your firewall—so you and your company don’t get burned.

TrendAI™ Research

Best Practices: Backing Up Data

In a data-driven world where information is often a company’s most valuable asset, protecting data is more important than it’s ever been.

TrendAI™ Research

Best Practices: Securing Sysadmin Tools

Legitimate tools used by IT/system administrators have become valuable cybercriminal targets because of the privilege they provide for greater network access. Here are some best practices for mitigating the abuse of sysadmin tools.

TrendAI™ Research

A Shift in the ATM Malware Landscape: From Physical to Network-based Attacks

ATM malware has become a mainstay in many cybercriminals’ arsenal due to its capability to steal money. In our joint efforts with Europol’s EC3, we explain in detail how criminals continue to leverage different ATM malware families and attack types.

TrendAI™ Research, Europol’s European Cybercrime Centre (EC3)

Patching Problems and How to Solve Them

Can we fix the lag between patch releases and actual implementation? Current events reveal that patching should be made a definite priority. We provide a guide on how to manage patching for enterprises and large organizations.

TrendAI™ Research

Mobile App Security for Developers

The use of mobile apps is increasing especially among enterprises. More than ever, developers must work harder to improve the security of the apps they create. Here are some best practices.

TrendAI™ Research

Frequently Asked Questions: The Petya Ransomware Outbreak

The Petya ransomware family has reemerged, becoming one of the most impactful yet. Is it similar to WannaCry? Does it have a kill switch? Here are some frequently asked questions about the threat.

TrendAI™ Research

What do Hackers do with Your Stolen Identity?

Identity theft is currently a gold mine for cybercriminals—one that reached an all-time high in 2016, with up to $16 billion worth of losses caused by fraud and identity theft. But what exactly happens with the stolen information?

TrendAI™ Research

Erebus Linux Ransomware: Impact to Servers and Countermeasures

A South Korean web hosting company was hit by a Linux version of the Erebus ransomware. Here’s what you need to know about the threat and what sysadmins can do to defend against it.

TrendAI™ Research

Securing Smart Cities

Cities around the world are getting smarter, but are they being designed with security in mind?

TrendAI™ Research

The State of SCADA HMI Vulnerabilities

A complete discussion of the different vulnerability categories, including case studies of vulnerable SCADA HMIs. The paper also provides a guide for vulnerability researchers, as well as vendors on quick and efficient bug discovery.

TrendAI™ Research

Protecting Home Networks: Start by Securing the Router

As home routers add more features, securing them becomes more difficult. End users should be aware of the effects of compromise, and how to protect their home routers.

TrendAI™ Research

WannaCry/Wcry Ransomware: How to Defend against It

Here’s what you need to know about this ongoing threat and what you can do to protect against it.

TrendAI™ Research

Rogue Robots: Testing the Limits of an Industrial Robot’s Security

The modern world relies heavily on industrial robots. But is the current robotics ecosystem secure enough to withstand a cyber attack?

TrendAI™ Research

Malware Using Exploits from Shadow Brokers Leak Reportedly in the Wild

Exploits found in the trove of malware recently leaked by hacking group Shadow Brokers are reportedly being used to install ransomware and backdoor. Are your systems protected?

TrendAI™ Research

From Espionage to Cyber Propaganda: Pawn Storm's Activities over the Past Two Years

This paper takes a look at Pawn Storm's operations within the last two years, and how the group has expanded their activities from espionage to the use of cyber propaganda tactics.

TrendAI™ Research

Ransomware Recap: Expanding Distribution Methods

This week's recap highlights new distribution methods that make ransomware more unpredictable in terms of how they infect their victims.

TrendAI™ Research

BrickerBot Malware Emerges, Permanently Bricks IoT Devices

A recently uncovered malware Brickerbot is making the rounds with the capability to permanently brick Internet of Things (IoT) devices. How can it be mitigated?

TrendAI™ Research

Shadow Brokers Leaks Hacking Tools: What it Means for Enterprises

Hacking group Shadow Brokers recently leaked a new trove of information-stealing tools and exploits targeting Windows systems and servers. What does this mean for enterprises?

TrendAI™ Research

Infosec Guide: Dealing with Threats to a Bring Your Own Device (BYOD) Environment

This Infosec Guide will tackle the primary threats organizations face when implementing BYOD programs, as well as best practices and solutions to mitigate these threats.

TrendAI™ Research

Operation Cloud Hopper: What You Need to Know

A global cyberespionage campaign has been uncovered compromising managed IT service providers, using them as in-betweens to attack their targets. Here’s what you need to know.

TrendAI™ Research

The Michelangelo Virus, 25 Years Later

The Michelangelo virus scare remains a significant turning point for computer security, 25 years after its supposed major impact,

TrendAI™ Research

US Cities Exposed in Shodan

An in-depth analysis of Shodan data reveals how some of the biggest US cities fare in terms of exposed cyber assets, what this means in terms of security, and how home users and organizations can protect their data.

TrendAI™ Research

Best Practices: Identifying and Mitigating Phishing Attacks

Despite being one of the oldest scams on the internet, phishing continues to be a significant problem for both individuals and organizations. Here are some methods to identify and deal with potential phishing attempts.

TrendAI™ Research

Security 101: Business Process Compromise

Past events show that attackers don't just target people, but processes as well. Enterprises should be aware of the of rising possibility of Business Process Compromises.

TrendAI™ Research

Securing Your Routers Against Mirai and Other Home Network Attacks

Cybercriminals can turn unsecure home routers into slaves for their botnets or even abuse them to steal banking credentials. Know about your router’s hidden weaknesses and the many ways you can defend your homes and businesses against these threats.

TrendAI™ Research

InfoSec Guide: Mitigating Email Threats

Email remains an important communication tool for business organizations. Unfortunately, its widespread use also makes it an ideal platform for cybercrime. Here are some tips for dealing with email-based threats.

TrendAI™ Research

A Rundown of the Biggest Cybersecurity Incidents of 2016

The most notable cybersecurity incidents of the past year, from the biggest data breaches and most expensive attacks to the most persistent attackers and impactful malware.

TrendAI™ Research

Yahoo Discloses 2013 Breach that Exposed Over One Billion Accounts

Yahoo disclosed yet another breach that exposed 1 billion user accounts in August 2013. This comes shortly after it announced a smaller but significant hack last September.

TrendAI™ Research

The Cybercriminal Roots of Selling Online Gaming Currency

The sale of online gaming currencies, while not illegal, has been found to have cybercriminal ties. This research paper covers how cybercriminals use the profits from the trade of these virtual currencies to fund other attacks.

TrendAI™ Research

Are Pagers Leaking Your Patients’ PHI?

With a little SDR knowledge and a $20 USB dongle, attackers can read unencrypted pager messages from tens of kilometers away. Who still uses pagers in this day and age? Healthcare facilities. Goodbye, PHI.

TrendAI™ Research

500 Million Yahoo Users Affected by Data Breach – Password Change Recommended

Yahoo users are prompted to change passwords as a massive breach compromises 500 million accounts.

TrendAI™ Research

Enterprise Network Protection: Protecting Data through Network Segmentation

An enterprise guide on network segmentation; how it works to secure large enterprise networks, why it's needed, and examples of some of the most widely used network models for different industries.

TrendAI™ Research

Ransomware-as-a-Service: Ransomware Operators Find Ways to Bring in Business

Cybercriminals are taking cues from legitimate enterprises and focusing on growing their operations. Different variations of ransomware-as-a-service show the evolving nature of the business.

TrendAI™ Research

Ransomware 101: What, How, and Why

This infographic shows how ransomware has evolved, how big the problem has become, and ways to avoid being a ransomware victim.

TrendAI™ Research

Billion-Dollar Scams: The Numbers Behind Business Email Compromise

Business Email Compromise schemes are one of the biggest threats to companies to date. One carefully crafted email sent to the right person can cost a company millions of dollars. How is it done and what makes it so effective?

TrendAI™ Research

Marcher Android Banking Malware Now Targeting UK Customers

Developers of the Android-based banking trojan Marcher updated the malware, adding major banks in United Kingdom to its list of targets.

TrendAI™ Research

Austrian Aeronautics Company Loses Over €42 Million to BEC Scam

Austria-based Fischer Advanced Composite Components AG (FACC), a major designer and manufacturer of aircraft components and systems, falls prey to a business email compromise (BEC) scheme that cost the company over 42 million euros in losses.

TrendAI™ Research

Keeping Digital Assets Safe: The Need for Data Classification

This primer discusses the importance of data classification, and how organizations can implement these strategies to reduce the effects should a data breach occur.

TrendAI™ Research

2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M

Long time users of Linkedin users may very well need to change their passwords once more as a cybercriminal puts the email addresses and passwords of 117 million users up for sale.

TrendAI™ Research

CryptXXX, 7ev3n Ransomware Get Major Updates

Newly-discovered ransomware strains, CryptXXX and 7ev3n, get major updates from malware authors.

TrendAI™ Research

Dark Motives Online: An Analysis of Overlapping Technologies Used by Cybercriminals and Terrorist Organizations

Research on the common technologies used by cybercriminals and terrorists to benefit their cause, from the services they abuse to the tools they’ve homebrewed to streamline activities.

TrendAI™ Research

Reveton Ransomware Descendant, CryptXXX Discovered

A new ransomware strain, CryptXXX, was recently discovered making its rounds since the tail-end of March.

TrendAI™ Research

Locky Ransomware Strain Led Kentucky Hospital to an “Internal State of Emergency”

Kentucky-based Methodist Hospital announced a ransomware attack that led to an “internal state of emergency.”

TrendAI™ Research

The Angler Connection: Massive Malvertising Campaign Linked to Angler Exploit Kit and BEDEP

Top news sites, entertainment portals, and political commentary sites were affected by a massive malvertising campaign related to the Angler Exploit Kit.

TrendAI™ Research

Internet of Things: Connected Life Security

The world is now more connected than ever. Gartner predicts 25 billion connected devices will be in use by 2020. How is this increased convenience affecting our privacy and security across the globe?

TrendAI™ Research

New Crypto-Ransomware Locky Uses Malicious Word Macros

A new crypto-ransomware type called Locky has been discovered riding on document-based macros and using infection techniques borrowed from the notorious banking malware DRIDEX.

TrendAI™ Research

Frequently Asked Questions: BlackEnergy

What we know about BlackEnergy, a Trojan known to have been used in attacks on Ukraine power providers that caused a massive outage in late 2015.

TrendAI™ Research

Operation Pawn Storm: Fast Facts and the Latest Developments

Operation Pawn Storm is an active economic and political cyber-espionage operation that has targeted high-profile entities from government institutions to media personalities. Here are its latest developments.

TrendAI™ Research

Ascending the Ranks: The Brazilian Cybercriminal Underground in 2015

Trend Micro's latest visit to the Brazilian cybercriminal underground reveals its latest trends and available services, from online banking malware to tutorial classes for new cybercriminals.

TrendAI™ Research

Security 101: Business Email Compromise (BEC) Schemes

The Federal Bureau of Investigation (FBI) released a public service announcement earlier this year warning about Business Email Compromise (BEC) schemes. Here’s what you need to know, and what you can do to prevent attacks.

TrendAI™ Research

First Malware-Driven Power Outage Reported in Ukraine

Malware found in power suppliers' systems may be responsible for causing a massive power outage in Ukraine.

TrendAI™ Research

Spear Phishing 101: What is Spear Phishing?

The objective of spear phishing and phishing are ultimately the same—to trick a target into opening an attachment or click on a malicious embedded link. But what is spear phishing? Learn more from this article.

TrendAI™ Research

Follow the Data: Dissecting Data Breaches and Debunking the Myths

A decade's worth of breaches has led to this. Forward-looking threat researcher Numaan Huq analyzes what has happened to the stolen data affecting major US industries. We map out the probabilities; see where the information goes and how much it's sold.

TrendAI™ Research

FBI Warns Public on Dangers of the Internet of Things

The FBI released a Public Service Announcement that warns about the potential security risks of the IoT. Learn more about these risks and their real-life consequences.

TrendAI™ Research

Virtual Patching in Mixed Environments: How It Protects You

A primer on the advantages of implementing virtual patching to protect systems against unpatched vulnerabilities.

TrendAI™ Research

Hacktivism 101: A Brief History and Timeline of Notable Incidents

While not done for profit, hacktivism has forced companies and organizations to face critical security challenges. Find out what it is and how it evolved from being the “Internet’s voice” to one of today's biggest security threats.

TrendAI™ Research

The Gaspot Experiment: How Gas-Tank-Monitoring Systems Could Make Perfect Targets for Attackers

In the US and other locations worldwide, gas stations are primarily privately owned. While most of them have been modernized, there are still a lot of risks tied to their business, especially those that are connected to the Internet.

TrendAI™ Research

Security On-The-Go: Setting up a Virtual Private Network (VPN)

There are privacy and security risks involved in connecting to public or 'free' Wi-fi hotspots. Here's a 4-step guide to setting up a virtual private network (VPN) for the times when you have to connect to unfamiliar networks.

TrendAI™ Research

Going Deeper: Exploring the Deep Web

An in-depth look into the duality of the Deep Web—how its anonymity allows free communication and the trade of illegal goods and services. See how it impacts the real world today, and how it could evolve over the next few years.

TrendAI™ Research

The Case for Making BYOD Safe

BYOD networks can benefit both the workers and the company, but it also presents a number of potential risks. This infographic details the challenges of balancing employee freedom, functionality, and security on BYOD.

TrendAI™ Research

How Operation Tropic Trooper Infiltrates Secret Keepers

This research paper offers a look into "Operation Tropic Trooper", an ongoing targeted attack campaign that uses old infiltration tactics to steal state and industry secrets since 2012.

TrendAI™ Research

Gone Phishing: How Phishing Leads to Hacked Accounts and Identity Theft

Phishing continues to be a popular method used by cybercriminals to trick users into giving out their personal information and credentials. Before you become a victim, learn about popular phishing techniques, and how to spot a phishing attempt.

TrendAI™ Research

Identity Theft and the Value of Your Personal Data

How dangerous is it to leave your personal information—your name, your social security number, your credit card and financial details, even your email address and phone number—where other people can access them?

TrendAI™ Research

Ransomware: What It Is and How You Can Protect Yourself

Ransomware is a type of malware that locks your computer screen and prevents you from accessing your files until you pay a “ransom”. Learn more about this type of malware and how you can prevent likely attacks.

TrendAI™ Research

World Backup Day: What, When, Where and Why You Need to Back up and How to do it

Observe World Backup Day by learning why you should back up, what to back up, where to store them, when you should do it, and how to do it.

TrendAI™ Research

Malvertising: When Online Ads Attack

Cybercriminals are increasingly using malicious advertisements as a platform for spreading malware. Find out how they work how you can protect yourself from these online threats.

TrendAI™ Research

Rocket Kitten Showing Its Claws: Operation Woolen-GoldFish and the GHOLE campaign

This research paper offers a look into the activities and methods used by Rocket Kitten, a group behind cyber attacks on Israeli and European organizations

TrendAI™ Research

Operation Arid Viper: Bypassing the Iron Dome

This Trend Micro paper unearths two separate but linked malware campaigns—Operation Arid Viper and Advtravel. Operation Arid Viper targets specific Israeli organizations using infrastructure in Germany with ties to Gaza in Palestine.

TrendAI™ Research

Millions Affected in Anthem Breach, Healthcare Companies Prime Attack Targets

Tens of millions of current and former customers and employees of Anthem Inc., the second largest health insurance provider in the United States, are reportedly affected in a targeted attack.

TrendAI™ Research

The Hack of Sony Pictures: What We Know and What You Need to Know

While Sony recovers from the massive hack, we continue to monitor investigations and developments. Here's a rundown of what happened, what was stolen, who’s being implicated, and tips on how you can defend against likely attacks. [updated]

TrendAI™ Research

From Cybercrime to Cyberspying: Using Limitless Keylogger and Predator Pain

A Trend Micro research paper that reveals the operations and cybercriminals behind Predator Pain and Limitless Keylogger, which are malware toolkits that are easily obtained from underground forums.

TrendAI™ Research

Pawn Storm Espionage Attacks Use Decoys, Deliver SEDNIT

This Trend Micro paper unravels a series of attacks that targets military officials and defense contractors. Dubbed as “Operation Pawn Storm,” the group of threat actors use two known attack vectors: spear phishing emails and a network of phishing websites.

TrendAI™ Research

What to Consider When Buying a Smart Device

Buying into the Internet of Things starts out with smart home devices. Unfortunately, connecting your home devices to the Internet has its drawbacks. Here are some important factors to consider before buying smart devices for the home.

TrendAI™ Research

PLEAD Campaign Attacks Taiwan Ministries

The PLEAD campaign is the second attack to target entities in Taiwan in the first half of 2014. Taiwanese agencies were also targeted in May using a Microsoft Word zero-day vulnerability.

TrendAI™ Research

Cybercriminal Underground Works In Business Models

These virtual black markets mostly thrive in forums or chat rooms where numerous cybercriminals act as anonymous businessmen who trade goods and services to make profit. And much like typical businessmen, they adhere to specific business models.

TrendAI™ Research

.Bit Domain Used To Deliver Malware and other Threats

For many users, .com is the only domain that matters. But when cybercriminals start using .bit, a new kind of top-level domain (TLD) for malicious activities, people are bound to take notice.

TrendAI™ Research

Hacking Tools, Survey Scam Target Facebook Users

TrendAI™ Research