TrendAI™ Research

ATF Reports Breach After Qilin Leak Site Appearance: Insights from TrendAI™

The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has reportedly appeared on the Qilin ransomware group’s leak site. Explore how Qilin operates and what organizations can learn from its past tactics.

TrendAI™ Research

Security 101: Virtual Patching

What happens to an unpatched or vulnerable application or organization’s IT infrastructure? Here's how virtual patching helps enterprises address vulnerability and patch management woes.

TrendAI™ Research

UK Power Facility Cyberattack Shutdown: What Critical-Infrastructure Operators and Defenders Need to Know

A reported cyberattack on a UK power-generation facility in July 2026 shows that even disruptions at a single site can raise broader questions about critical infrastructure resilience.

TrendAI™ Research

The Architecture Behind $1B: How Customers Run TrendAI Vision One™ on AWS, and Secure Their AI Workloads

TrendAI™ Research

Malicious Cyber Activity Targeting US Water Utilities: What Operators Need To Know

Disruption reported across at least seven states, from equipment left accessible online. The issue is largely a matter of configuration and access control, and here's what to fix first.

TrendAI™ Research

Governing the Republic of AI Agents: The Framework Your AI Agents Already Need

AI agents have evolved from tools to autonomous participants in your organization, but governance has not kept pace. TrendAI™ proposes a six-pillar framework built to close that gap.

TrendAI™ Research

Agentic AI’s Shadow Pipeline: Mapping the Attack Surface Behind Trusted Workflows

As enterprises connect AI agents to cloud infrastructure and production workflows, the cloud-to-agent pipeline is becoming a primary attack surface. This article maps the risks for tech, media, and communications organizations and outlines detection and security best practices.

TrendAI™ Research

Driving Security at the Speed of AI Agents with NVIDIA DOCA

Agentic AI compresses exploit timelines from weeks to hours, and reactive security can't keep pace. TrendAI™, working with NVIDIA, delivers an isolated trust architecture purpose-built for AI infrastructure, hardening AI factories before attackers find a way in.

TrendAI™ Research

Edge Under Siege: How State-Sponsored Actors Exploit Your Perimeter

Edge devices have become a primary entry point for state-sponsored espionage, giving attackers a cheaper, faster path to network access, credential theft, and traffic interception. Our report examines the threat landscape, economics, and actor activity driving this shift, along with what CISOs and security leaders can do to respond.

TrendAI™ Research

Ransomware Spotlight: Agenda

Agenda has rapidly grown into one of the most prolific and dangerous ransomware operations, leveraging advanced techniques, cross-platform variants, and alliances with other major threat groups. Its aggressive double-extortion model and expanding victim base across critical industries make it a serious enterprise risk that demands proactive detection and defense.

TrendAI™ Research

AI Security Starts Here: The Essentials for Every Organization

AI’s rapid growth brings new risks as well as opportunities. Strong security foundations are essential to ensure innovation remains safe, compliant, and resilient.

TrendAI™ Research

Ransomware Spotlight: DragonForce

DragonForce, a Ransomware-as-a-Service group first observed in 2023, rose to greater prominence in 2025 after a series of notable attacks linked to the group. Despite its unclear origins, what is evident is its rapid evolution and its aggressive, affiliate-driven model, marking it as a rising threat to watch out for.

TrendAI™ Research

Lessons in Resilience from the Race to Patch SharePoint Vulnerabilities

In this article, Trend Micro discusses how the fast-moving attacks using CVE-2025-53770 and CVE-2025-53771 have underscored the essential role of virtual patching and reliable intelligence in protecting organizations against evolving threats.

TrendAI™ Research

Trend Micro State of AI Security Report 1H 2025

Trend Micro’s State of AI Security report explores how AI’s rapid adoption is transforming both business efficiency and cybercrime methods, highlighting novel threats and strategic defenses to help organizations adapt in an increasingly AI-driven world.

TrendAI™ Research

The Future of Social Engineering

Social engineering is a tactic that, at its core, creates a false narrative to exploit a victim’s credulity, greed, curiosity, or any other very human characteristics. Attackers continue to enhance existing social engineering and use new technologies.

TrendAI™ Research

Ransomware Spotlight: Water Ouroboros

Water Ouroboros (aka Hunters International) is a Ransomware-as-a-Service (RaaS) group that first emerged in October 2023. It is suspected to be a possible spin-off of Hive ransomware, which had its activities disrupted by the Federal Bureau of Investigation (FBI) in January 2023.

TrendAI™ Research

Ransomware Spotlight: Ransomhub

RansomHub is a young Ransomware-as-a-Service (RaaS) group tracked by Trend Micro as Water Bakunawa. Despite being a young ransomware group first detected in February 2024, RansomHub moves boldly by targeting larger enterprises more likely to pay ransoms.

TrendAI™ Research

Unleashing Chaos: Real World Threats Hidden in the DevOps Minefield

Threat actors are actively looking for exposed .env files. These files have become ticking bombs deeply rooted inside DevOps practices. Our research paper uncovers the hidden dangers in DevOps using real-world examples.

TrendAI™ Research

Ransomware Spotlight: INC

INC ransomware has been observed to exploit CVE-2023-3519 and uses HackTool.Win32.ProcTerminator.A for defense evasion and HackTool.PS1.VeeamCreds for credential access in its different attack chains.

TrendAI™ Research

The Illusion of Choice: Uncovering Electoral Deceptions in the Age of AI

Elections are the cornerstone of modern democracy, an exercise where a populace expresses its political will through the casting of ballots. But as electoral systems adopt and embrace technology, this introduces significant cybersecurity risks, not only to the infrastructure supporting an election but also to the people lining up in polling booths.

TrendAI™ Research

Ransomware Spotlight: LockBit

The LockBit intrusion set, tracked by Trend Micro as Water Selkie, has one of the most active ransomware operations today. With LockBit’s strong malware capabilities and affiliate program, organizations should keep abreast of its machinations to effectively spot risks and defend against attacks.

TrendAI™ Research

Ransomware Spotlight: 8Base

Despite positioning themselves as penetration testers, 8Base ransomware threat actors profit off their victims that are significantly comprised of small businesses. In this feature, we investigate how the gang operates to gain insights on how organizations can protect systems better from compromises that could result in financial loss.  

TrendAI™ Research

Apache APISIX In-the-wild Exploitations: An API Gateway Security Study

This article focuses on the Apache APISIX API gateway and its security implications.

TrendAI™ Research

Ransomware Spotlight: Rhysida

The threat actors behind the Rhysida ransomware targeted multiple industries by posing as a cybersecurity team that offered to help its victims identify security weaknesses in their networks and systems. Although the group’s activity was first observed back in May 2023, its leak site was established as early as March 2023. Like other ransomware groups, it employs double extortion tactics to pressure its victims into paying a ransom demand in Bitcoin.

TrendAI™ Research

Ransomware Spotlight: Trigona

After the shutdown of its leak site in October, we look at how ransomware group Trigona operated during its period of activity and discuss how enterprises can fortify their defenses against similar threats.

TrendAI™ Research

Steering Clear of Security Blind Spots: What SOCs Need to Know

As technologies continue to evolve and expand, organizations experience a technological paradox: Their increasing interconnectivity means that they simultaneously become more distributed. Case in point, robust cloud and networking technologies support today’s widespread adoption of hybrid and remote work arrangements, allowing employees all over the globe to work remotely full time or at least part of the time.

TrendAI™ Research

Ransomware Spotlight: Akira

This report spotlights Akira, a novel ransomware family with highly experienced and skilled operators at its helm.

TrendAI™ Research

Ransomware Spotlight: Play

Play is shaping up to be a player on the rise within the ransomware landscape, with its operators likely to continue using the ransomware in future. We take a deep dive into its operations and offer ways in which organizations can shore up their defenses against this emerging threat.

TrendAI™ Research

Unmasking Pig-Butchering Scams and Protecting Your Financial Future

This report delves into the nature of pig-butchering scams, how scammers carry out their operations, the new pig-butchering tactics we’ve observed in the wild, and what individuals can do to avoid falling for these fraudulent investments and dealing with massive amounts of debt.

TrendAI™ Research

Ransomware Spotlight: TargetCompany

We detail everything you need to know about TargetCompany, a ransomware family with different monickers, including the evolution of its attack flow as it cemented its place in the threat landscape.

TrendAI™ Research

Ransomware Spotlight: Royal

Backed by threat actors from Conti, Royal ransomware is poised to wreak havoc in the threat landscape, starting strong by taking a spot among the most prolific ransomware groups within three months since it was first reported. Combining new and old techniques and quick evolution, it is likely to remain a big player in the threat landscape in the future.

TrendAI™ Research

Ransomware Spotlight: Magniber

The Magniber ransomware initially targeted only Asian countries when it was first detected in 2017. However, it resurfaced in 2021 and continues to operate today with expanded targets around the globe. Magniber remains a significant player in the threat landscape, with malicious attackers likely to continue using the ransomware in future.

TrendAI™ Research

Ransomware Spotlight: Cuba

Cuba ransomware emerged on the scene with a spate of high-profile attacks in late 2021. Armed with an expansive infrastructure, impressive tools, and associated malware, Cuba ransomware is considered a significant player in the threat landscape, and is likely to remain so in the future through its continued evolution.

TrendAI™ Research

Ransomware Spotlight: BlackCat

Known for its unconventional methods and use of advanced extortion techniques, BlackCat has quickly risen to prominence in the cybercrime community. As this ransomware group forges its way to gain more clout, we examine its operations and discuss how organizations can shore up their defenses against it.

TrendAI™ Research

Uncovering Security Weak Spots in Industry 4.0 CNC Machines

The technological leaps of the Fourth Industrial Revolution may have made production machinery more efficient, but these have also put manufacturers in the crosshairs of cybercriminals. Our research tackles the risks that computer numerical control (CNC) machines now face as they’re integrated into today’s networked factories.

TrendAI™ Research

Leaked Today, Exploited for Life: How Social Media Biometric Patterns Affect Your Future

The photos, videos, and audio posts we put online expose sensitive biometric patterns that can be abused by cybercriminals. These patterns are virtually unchangeable and can be used now or in future attacks.

TrendAI™ Research

Ransomware Spotlight: Black Basta

A relative newcomer in 2022, the Black Basta ransomware group has wasted no time making a name for itself by upgrading its toolset and racking up its victim count around the world mere months since its ransomware was first detected. Learn more about this new ransomware and fortify your organization’s defenses against this threat.

TrendAI™ Research

Metaworse? The Trouble with the Metaverse

Innovators are diving into a new and immersive virtual space, but with new technology comes new threats. We bring forward possible problematic issues that metaverse pioneers should be wary of.

TrendAI™ Research

Ransomware Spotlight: BlackByte

BlackByte is a ransomware group that has been building a name for itself since 2021. Like its contemporaries, it has gone after critical infrastructure for a higher chance of getting a payout. What techniques sets it apart?

TrendAI™ Research

Ransomware Spotlight: RansomEXX

RansomEXX is a ransomware variant that gained notoriety after a spate of attacks in 2020 and continues to be active today. With its targeted nature and history for choosing high-profile victims, we shine our spotlight on RansomEXX to reveal its tactics, techniques, and procedures.

TrendAI™ Research

Ransomware Spotlight: AvosLocker

AvosLocker is a relatively new ransomware variant that sports the staples of modern ransomware, namely a layered extortion scheme that begins with stolen data. We shed light on this emerging ransomware family and its key techniques.

TrendAI™ Research

Probing the Activities of Cloud-Based Cryptocurrency-Mining Groups

Our research into cloud-based cryptocurrency mining sheds light on the malicious actor groups involved in this space, their ongoing battle for cloud resources, and the actual extent of the impact of their attacks.

TrendAI™ Research

Ransomware Spotlight: Hive

Hive ransomware is one of the new ransomware families in 2021 that poses significant challenges to enterprises worldwide. We take an in-depth look at the ransomware group’s operations and discuss how organizations can bolster their defenses against it.

TrendAI™ Research

Ransomware Spotlight: Clop

We take a closer look at the operations of Clop, a prolific ransomware family that has gained notoriety for its high-profile attacks. We review this ransomware group’s constantly changing schemes and discuss how companies can shore up defenses against this threat.

TrendAI™ Research

Hidden Scams in Malicious Scans: How to Use QR Codes Safely

The popularity of QR codes has created fertile ground for malicous actors to spruce up their malware tool kit for scams that steal not only personal information but also hard-earned assets that are impossible to recover once lost. We take a closer look at the different QR code-related scams and provide helpful tips on how to use QR codes safely.

TrendAI™ Research

Ransomware Spotlight: REvil

Now that the reign of REvil has come to an end, it's time to regroup and strategize. What can organizations learn from REvil’s tactics? We review the rise, downfall, and future of its operations using insights into the group's arsenal and inner inner workings.

TrendAI™ Research

Ransomware Spotlight: Conti

Assumed to be the successor of the Ryuk ransomware, Conti is currently one of the most notorious active ransomware families used in high-profile attacks. Know all about this ransomware family and protect your company against this threat.

TrendAI™ Research

Investigating the Emerging Access-as-a-Service Market

We examine an emerging business model that involves access brokers selling direct access to organizations and stolen credentials to other malicious actors.

TrendAI™ Research

The Most Common Cloud Misconfigurations That Could Lead to Security Breaches

Using Trend Micro Cloud One™ – Conformity data, we looked at the top 10 Amazon Web Services (AWS) and Microsoft Azure services with the highest misconfiguration rates with regard to the implementation of Cloud Conformity rules.

TrendAI™ Research

IoT and Ransomware: A Recipe for Disruption

Ransomware can impact industrial operations in the bid to cause disruptions. Organizations need to reevaluate the security of their IoT environments in the face of such a threat.

TrendAI™ Research

IoT Security Issues, Threats, and Defenses

As the IoT continues to influence more environments and settings, we review what IoT security is and why it remains essential today.

TrendAI™ Research

TeamTNT Activities Probed: Credential Theft, Cryptocurrency Mining, and More

Our research sheds light on the tools and techniques used by TeamTNT and the potential impact of the group’s sundry malicious activities.

TrendAI™ Research

Trends and Shifts in the Underground N-Day Exploit Market

Our two-year research provides insights into the life cycle of exploits, the types of exploit buyers and sellers, and the business models that are reshaping the underground exploit market.

TrendAI™ Research

Modern Ransomware's Double Extortion Tactics and How to Protect Enterprises Against Them

Modern ransomware like Nefilim present new challenges and security concerns for enterprises across the world. How do these new families differ from traditional ransomware? And what can organizations do to mitigate risks?

TrendAI™ Research

The Nightmares of Patch Management: The Status Quo and Beyond

We discuss the challenges that organizations face in managing endpoint and server patches.

TrendAI™ Research

Return to Sender: Preventing Ransomware While Working From Home

Many employees have set up makeshift work spaces in their homes. This could leave them more susceptible to ransomware attacks that take advantage of vulnerabilities in unsecured spaces.

TrendAI™ Research

Security 101: Protecting Serverless and Container Applications with RASP (Runtime Application Self-Protection)

This article zeroes in on certain security considerations that developers need to know and the ways that they can build the best defense for container-based and serverless applications through runtime application self-protection (also known as RASP).

TrendAI™ Research

Exploiting AI: How Cybercriminals Misuse and Abuse AI and ML

We discuss the present state of the malicious uses and abuses of AI and ML and the plausible future scenarios in which cybercriminals might abuse these technologies for ill gain.

TrendAI™ Research, United Nations Interregional Crime and Justice Research Institute (UNICRI), Europol’s European Cybercrime Centre (EC3)

COVID-19 Used in Malicious Campaigns

Threat actors take advantage of the spread of COVID-19 for malicious campaigns. Goods and services related to the virus also appear in underground marketplaces and cybercriminal forums.

TrendAI™ Research

Ryuk 2020: Distributing Ransomware via TrickBot and BazarLoader

Starting this year, Ryuk began using another dropper called BazarLoader (also known as BazarBackdoor), which is primarily distributed via phishing emails that contain either malicious attachments or links to websites that host malware.

TrendAI™ Research

Operation Earth Kitsune: Tracking SLUB’s Current Operations

A watering hole campaign we dubbed as Operation Earth Kitsune is spying on users’ systems through compromised websites. Using SLUB and two new malware variants, the attacks exploit vulnerabilities including those of Google Chrome and Internet Explorer.

TrendAI™ Research

Shedding Light on Security Considerations in Serverless Cloud Architectures

Serverless computing is not immune to risks and threats. Our security research provides a comprehensive analysis of the possible attack scenarios that could compromise serverless services and deployments.

TrendAI™ Research

Lost in Translation: When Industrial Protocol Translation goes Wrong

This research paper looks at protocol gateways, which translate various protocols used by different industrial devices and machinery, and provides insight into the security issues and vulnerabilities found in these devices as well as ways to secure them.

TrendAI™ Research

Unveiling the Hidden Risks of Industrial Automation Programming

The legacy programming environments of widely used industrial machines could harbor virtually undetectable vulnerabilities and malware. Our security analysis of these environments reveals critical flaws and their repercussions for smart factories.

TrendAI™ Research, Politecnico di Milano

Ransomware Report: Avaddon and New Techniques Emerge, Industrial Sector Targeted

In this report, we discussed new ransomware family Avaddon, updates on techniques of other ransomware, and our latest figures.

TrendAI™ Research

Caught in the Crossfire: Defending Devices From Battling Botnets

As cybercriminals compete for dominance in their bid to create powerful botnets, users can make their own stand against warring sides by understanding how botnet malware works and securing their devices.

TrendAI™ Research

Cyberattacks from the Frontlines: Incident Response Playbook for Beginners

In the event of a cyberattack a strong incident response plan can get a business running again with minimal damages. Understand the response process in this playbook.

TrendAI™ Research

Millions of IoT Devices Affected by Ripple20 Vulnerabilities

The internet of things (IoT) landscape will be critically affected by the recently discovered Ripple20 vulnerabilities. This group of 19 bugs could potentially hit millions of IoT devices across many different industries.

TrendAI™ Research

Lemon Duck Cryptominer Spreads through Covid-19 Themed Emails

We have come across a PowerShell script (mailer script) that distributes the Lemon Duck cryptominer through a new propagation method: Covid-19-themed emails with weaponized attachments.

TrendAI™ Research

Smart Yet Flawed: IoT Device Vulnerabilities Explained

Are your smart devices vulnerable? Here are common vulnerabilities found in IoT devices and how to secure against them.

TrendAI™ Research

Qakbot Resurges, Spreads through VBS Files

We have seen events that point to the resurgence of Qakbot, a multi-component, information-stealing threat first discovered in 2007.

TrendAI™ Research

Phishing Site Uses Netflix as Lure, Employs Geolocation

A phishing site was found using a spoofed Netflix page to harvest account information, credit card credentials, and other PII.

TrendAI™ Research

Cloud Security: Key Concepts, Threats, and Solutions

When it comes to cloud computing security, or simply, cloud security, what are the builders’ responsibilities? How can developers and administrators ensure cloud security? This primer discusses the key concepts of cloud security and which areas need to be protected using flexible and comprehensive security solutions. 

TrendAI™ Research

Threats and Consequences: A Security Analysis of Smart Manufacturing Systems

Through a thorough analysis of an actual smart manufacturing environment, our in-depth security research explores several attack vectors that could be used by threat actors to launch unconventional attacks on smart manufacturing systems.

TrendAI™ Research

Security 101: How Fileless Attacks Work and Persist in Systems

Many attackers are switching from file-based malware to memory-based attacks to improve their stealth. “Fileless,” “zero-footprint,” or “living off the land” threats use legitimate applications to carry out malicious activities.

TrendAI™ Research

Group Behind TrickBot Spreads Fileless BazarBackdoor

A campaign propagates a new malware named ‘BazarBackdoor’, a fileless backdoor reportedly created by the same threat actors behind TrickBot.

TrendAI™ Research

Nefilim Ransomware Threatens to Expose Stolen Data

New ransomware variant Nefilim is distributed through exposed Remote Desktop Protocol (RDP) and threatens to release stolen data to the public.

TrendAI™ Research

Operation DRBControl: Uncovering a Cyberespionage Campaign Targeting Gambling Companies in Southeast Asia

The DRBControl campaign attacks its targets using a variety of malware and techniques that coincide with those used in other known cyberespionage campaigns.

TrendAI™ Research

Puerto Rico Loses Millions in Email Scam

The hacked email account of a finance employee was exploited to steal millions of dollars from the Puerto Rico government.

TrendAI™ Research

Misconfigured AWS S3 Bucket Leaks 36,000 Inmate Records

Over 30K records of US inmates were inadvertently exposed through a leaky AWS S3 cloud storage bucket.

TrendAI™ Research

Researchers Use Smart Light Bulbs to Infiltrate Networks

Researchers discovered a vulnerability in smart light bulbs that can allow hackers to install malware and infect other IoT devices.

TrendAI™ Research

Over 30 Million Stolen Credit Card Records Being Sold on the Dark Web

Cybercriminals were found selling over 30 million credit card details from around 40K U.S. states and 100 countries.

TrendAI™ Research

Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers

An unsecured Amazon S3 bucket was found leaking the data of more than 30,000 individuals. It was discovered to have exposed 85,000 files that included records with sensitive personally identifiable information (PII).

TrendAI™ Research

Malicious Script Plagues Over 2,000 WordPress Accounts, Redirects Visitors to Scam Sites

Over 2,000 WordPress sites were compromised by a malicious script that redirects visitors to scam sites, gains admin access, and installs fake plugins.

TrendAI™ Research

Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment

A new sextortion scheme threatens to expose nude videos supposedly captured via victims' mobile phones and home cameras.

TrendAI™ Research

Fake Company, Real Threats: Logs From a Smart Factory Honeypot

To determine threat actors' degree of knowledge in compromising a smart factory, we deployed our most elaborate honeypot to date. The incidents we observed show the kinds of attacks that can easily affect poorly secured manufacturing environments.

TrendAI™ Research

Mobile Banking Trojan FakeToken Resurfaces, Sends Offensive Messages Overseas from Victims’ Accounts

An updated version of mobile malware FakeToken was found sending massive numbers of offensive messages to foreign countries.

TrendAI™ Research

Into the Battlefield: A Security Guide to IoT Botnets

We recap the history and recent campaigns of IoT botnets to help users defend against the different malware competing for control and resources of regular smart devices.

TrendAI™ Research

Cheats, Hacks, and Cyberattacks: Threats to the Esports Industry in 2019 and Beyond

Esports competitions continue to gain momentum, making the entities involved more attractive targets for cybercrime.

TrendAI™ Research

Putting the Eternal in EternalBlue: Mapping the Use of the Infamous Exploit

In 2017, EternalBlue was the driving force behind one of the nastiest ransomware outbreaks on record. And despite available fixes, it is still being used by malware today—from ransomware to widespread cryptocurrency miners.

TrendAI™ Research

Security 101: Zero-Day Vulnerabilities and Exploits

A zero-day attack exploits an unpatched vulnerability. Until a patch becomes available, it is often a race between threat actors trying to exploit the flaw and vendors or developers rolling out a patch to fix it.

TrendAI™ Research

The Risks of Open Banking: Are Banks and their Customers Ready for PSD2?

Our research highlights the current and new risks that the financial industry will have to defend against, and predict how cybercriminals will abuse and attack Open Banking.

TrendAI™ Research

Texas Municipalities Hit by REvil/Sodinokibi Paid No Ransom, Over Half Resume Operations

Cybercriminals who held to ransom the files of 22 Texas local government units for a combined ransom amount of US$2.5 million did not get a single cent, according to Texas state officials.

TrendAI™ Research

Unusual CEO Fraud via Deepfake Audio Steals US$243,000 From UK Company

An unusual case of CEO fraud used a deepfake audio, an artificial intelligence (AI)-generated audio, and was reported to have conned US$243,000 from a U.K.-based energy company.

TrendAI™ Research

BEC Scam Costing Almost US$11 Million Leads to FBI Arrest of Nigerian Businessman

The CEO of the Invictus Group of Companies, Obinwanne Okeke, has reportedly been arrested by the FBI after he was accused of conspiracy to commit computer and wire fraud.

TrendAI™ Research

The Rising Tide of Credential Phishing: 2.4 Million Attacks Blocked by Trend Micro Cloud App Security in 2019 1H

Credential phishing continues to be a bane for organizations. In the first half of 2019, the Trend Micro™️ Cloud App Security™️ solution caught 2.4 million attacks of this type — a 59% increase from 1.5 million in the second half of 2018.

TrendAI™ Research

Report: Huge Increase in Ransomware Attacks on Businesses

According to a new report, ransomware attacks against businesses increased by 363% percent year-over-year. There has also been a greater number of ransomware attacks targeting different public sectors and local governments since the start of 2019.

TrendAI™ Research

Risks Under the Radar: Understanding Fileless Threats

Hackers use fileless threats to take advantage of existing applications and attack systems. Here we discuss noteworthy events, techniques, and best practices that can help identify fileless threats and defend against attacks.

TrendAI™ Research

Malicious Spam Campaign Uses ISO Image Files to Deliver LokiBot and NanoCore

A malicious spam campaign conducted in April used ISO image files to deliver the notorious LokiBot and NanoCore trojans.

TrendAI™ Research

Container Security: Examining Potential Threats to the Container Environment

The rise in adoption of containers means a greater need for security awareness. Our infographic details the various threats that container users could encounter at each stage of the development pipeline.

TrendAI™ Research

What You Need To Know About Tax Scams

Tax season is upon us (again), and so are IRS tax scammers. How prepared are you when it comes to filing your taxes and defending against IRS tax fraud? Learn more about these scams and how you can protect yourself.

TrendAI™ Research

Security in the Era of Industry 4.0: Dealing With Threats to Smart Manufacturing Environments

As manufacturing companies continue to adopt Industry 4.0, many environments could still be falling short on security with outdated systems, unpatched vulnerabilities, and unsecure files that leave them vulnerable to attacks.

TrendAI™ Research

Google and Facebook Fraudster Pleads Guilty to $100 million Scam

A business email compromise (BEC) scheme took more than $100 million from Facebook and Google. Legitimate-looking invoices, contracts and more fooled the two tech companies and they wired millions to the fraudsters over a period of years.

TrendAI™ Research

Global Telecom Crime Undermining Internet Security: Cyber-Telecom Crime Report

As the field of telecommunication continues to evolve, so should its security. Understanding its current threat landscape can help reduce the impact of crimes like telecom fraud and prepare us for future threats in the age of the IoT.

TrendAI™ Research, Europol’s European Cybercrime Centre (EC3)

What You Need to Know About the LockerGoga Ransomware

The systems of Norsk Hydro were reportedly struck by LockerGoga ransomware. Here's what you need to know about this threat and how to defend against it.

TrendAI™ Research

Examining Ryuk Ransomware Through the Lens of Managed Detection and Response

Trend Micro‘s Managed Detection and Response (MDR) and Incident Response teams investigated two separate Ryuk attacks with seemingly little in common with each other.

TrendAI™ Research

Securing Smart Homes and Buildings: Threats and Risks to Complex IoT Environments

The evolution of smart homes and smart buildings into complex IoT environments reflects the continuing developments in home and industrial automation. Security should not be left behind as increased complexity also means new threats and risks.

TrendAI™ Research

Attacks Against Industrial Machines via Vulnerable Radio Remote Controllers: Security Analysis and Recommendations

Radio frequency (RF) technology is being used in operations to control various industrial machines. However, the lack of implemented security in RF communication protocols could lead to production sabotage, system control, and unauthorized access.

TrendAI™ Research

Ransomware MongoLock Immediately Deletes Files, Formats Backup Drives

We found a wave of MongoLock ransomware attacks that immediately deletes important files upon infection and scans the backup drives for data deletion.

TrendAI™ Research

Security 101: Defending Against Fileless Malware

Fileless threats aren’t as visible compared to traditional malware and employ a variety of techniques to stay persistent. Here's a closer look at how fileless malware work and what can be done to thwart them.

TrendAI™ Research

MQTT and CoAP: Security and Privacy Issues in IoT and IIoT Communication Protocols

We looked into MQTT brokers and CoAP servers around the world to assess IoT protocol security. Learn how to prevent risks and secure machine-to-machine (M2M) communications over MQTT and CoAP in our research.

TrendAI™ Research, Eurecom and Politecnico di Milano (POLIMI)

Hacker Infects Node.js Package to Steal from Bitcoin Wallets

A Node.js module with nearly two million downloads a week was compromised after the library was injected with malicious code programmed to steal bitcoins in wallet apps.

TrendAI™ Research

Cryptocurrency-mining Malware Targets Linux Systems, Uses Rootkit for Stealth

We recently encountered a cryptocurrency-mining malware affecting Linux systems. It is notable for being bundled with a rootkit component that hides the malicious process’ presence from monitoring tools.

TrendAI™ Research

Critical Infrastructures Exposed and at Risk: Energy and Water Industries

Securing energy and water should remain top priority in the continuing integration of the industrial internet of things in these critical sectors.

TrendAI™ Research

Virtual Patching: Patch Those Vulnerabilities before They Can Be Exploited

The average organization takes over 30 days to patch operating systems and software, and longer for more complex business applications and systems. This infographic shows how virtual patching solutions can help mitigate threats from vulnerabilities.

TrendAI™ Research

LoJax UEFI Rootkit Used in Cyberespionage

Security researchers came across a Unified Extensible Firmware Interface (UEFI) rootkit in the wild being used for cyberespionage. Named LoJax, the rootkit is reportedly packaged with other tools that modifies the system’s firmware to infect it with malware.

TrendAI™ Research

Data Breaches 101: How They Happen, What Gets Stolen, and Where It All Goes

Data breaches take time and a lot of effort to pull off, but successful breaches can affect not just organizations, but also millions of people. Learn what a data breach is, what types of data is usually stolen, and what happens to stolen data.

TrendAI™ Research

Over 200,000 MikroTik Routers Compromised in Cryptojacking Campaign

Security researchers uncovered a cryptojacking campaign that exploits a vulnerability in MikroTik routers to inject a malicious version of Coinhive. Here’s what you need to know.

TrendAI™ Research, TrendAI Rese

Fileless Malware PowerGhost Targets Corporate Systems

A new fileless malware utilizes Powershell and EternalBlue via WMI for propagation, infecting workstations and servers connected to a local server with a cryptocurrency miner and a DDos tool. Significant infections have been detected in North America and Europ

TrendAI™ Research

FBI Report: Global BEC Losses Exceeded US$12 Billion in 2018

The Federal Bureau of Investigation (FBI) issued a public service announcement (PSA) regarding the continued increase of Business Email Compromise (BEC) scams, which total global losses have already reached over US$12 billion in 2018.

TrendAI™ Research

The Rise and Fall of Scan4You

We delved into the rise and fall of Scan4You, the largest counter antivirus service in the underground, its operators, and the ties that bind them to other cybercriminals.

TrendAI™ Research

Exposed Video Streams: How Hackers Abuse Surveillance Cameras

IP surveillance cameras provide certain conveniences, but control of this can fall into the wrong hands. What threats are there for these devices and what can be done to minimize risk?

TrendAI™ Research

Curbing the BEC Problem Using AI and Machine Learning

Due to BEC’s evolving and treacherous nature, run-of-the-mill best practices and security solutions have become weak to withstand attacks. Find out how advanced solutions that utilize artificial intelligence and machine learning help in defending against BEC.

TrendAI™ Research

Exposed Devices and Supply Chain Attacks: Overlooked Risks in Healthcare Networks

This research examines the oft-overlooked infection vectors in today’s healthcare networks: exposed medical devices and supply chain attacks.

TrendAI™ Research

Tesla and Jenkins Servers Fall Victim to Cryptominers

Vulnerable enterprise servers are being compromised by individuals or groups looking for resources to mine cryptocurrency. The latest victims are automobile-maker Tesla and users of Jenkins servers.

TrendAI™ Research

North Korean Hackers Allegedly Exploit Adobe Flash Player Vulnerability (CVE-2018-4878) Against South Korean Targets

In a security alert posted on its website on January 31, The South Korean Computer Emergency Response Team (KR-CERT) warned of a zero-day vulnerability in Adobe Flash player that could be maliciously exploited.

TrendAI™ Research

Digital Vandals: Exploring the Methods and Motivations behind Web Defacement and Hacktivism

Activists have traditionally used physical signs and catchy slogans to promote their political agenda, but the internet offers a significantly broader audience, so these activities have since moved online.

TrendAI™ Research

Delving into the World of Business Email Compromise (BEC)

We looked at BEC-related incidents over a span of nine months to see emerging and present trends from BEC incidents, examine the tools and techniques used by cybercriminals, and analyze the data to give us an overall picture of what BEC looks like today.

TrendAI™ Research

Meltdown and Spectre Intel Processor Vulnerabilities: What You Need to Know

Microsoft, Linux, Google, and Apple started rolling out patches addressing design flaws in processor chips that security researchers named Meltdown and Spectre. What are they, and how can they affect users?

TrendAI™ Research

Data on 123 Million US Households Exposed Due to Misconfigured AWS S3 Bucket

A year that saw major data breaches, including some notable ones from companies like Uber and Equifax, just saw another breach that will likely rank as among 2017’s most notable incidents.

TrendAI™ Research

Cities Exposed in Shodan

Western European, UK, French, German, and US cities exposed. Are your connected devices searchable on the internet? Find out what you are risking.

TrendAI™ Research

Uber Breach Exposes the Data of 57 Million Drivers and Users

In a highly publicized data breach incident, rideshare application Uber announced that the personal information of 57 million customers and drivers were potentially compromised in October 2016.

TrendAI™ Research

Coinhive Miner Emerges as the 6th Most Common Malware

A new report reveals Coinhive's reach after it ranked the coin miner as the 6th most common malware in the world.

TrendAI™ Research

High-Tech Highways

Intelligent Transportation Systems are slowly being adopted all over the world. Securing the future of transportation from cyberattacks should be a top priority.

TrendAI™ Research

Best Practices: Securing Your Mobile Device

The number of mobile phone users around the world is projected to exceed the five billion mark by 2019. Since cybercriminals usually cast wide nets to reach more potential victims, mobile users should protect their devices early on to defend against threats.

TrendAI™ Research

The Middle Eastern and North African Underground: Where Culture and Cybercrime Meet

The Middle Eastern and North African (MENA) underground is characterized by its ironic mix of ideology and felony. We take a look at its inner workings, available wares, and the unique sense of brotherhood shared by its players.

TrendAI™ Research

Best Practices: How to Secure Your Social Media Accounts

The leading social media platforms have billions of users, and the number keeps getting bigger every year. Learn how to keep your social media accounts secure.

TrendAI™ Research

Red Alert 2.0 Android Trojan Spreads Via Third Party App Stores

A spate of new attacks targeting the Android operating system have been discovered using a banking trojan named Red Alert 2.0.

TrendAI™ Research

Best Practices: Deploying an Effective Firewall

There is no panacea for building a hacker-proof firewall, but there are things that can be done to streamline its management. These best practices provide a starting point for managing your firewall—so you and your company don’t get burned.

TrendAI™ Research

Best Practices: Backing Up Data

In a data-driven world where information is often a company’s most valuable asset, protecting data is more important than it’s ever been.

TrendAI™ Research

Best Practices: Securing Sysadmin Tools

Legitimate tools used by IT/system administrators have become valuable cybercriminal targets because of the privilege they provide for greater network access. Here are some best practices for mitigating the abuse of sysadmin tools.

TrendAI™ Research

A Shift in the ATM Malware Landscape: From Physical to Network-based Attacks

ATM malware has become a mainstay in many cybercriminals’ arsenal due to its capability to steal money. In our joint efforts with Europol’s EC3, we explain in detail how criminals continue to leverage different ATM malware families and attack types.

TrendAI™ Research, Europol’s European Cybercrime Centre (EC3)

Patching Problems and How to Solve Them

Can we fix the lag between patch releases and actual implementation? Current events reveal that patching should be made a definite priority. We provide a guide on how to manage patching for enterprises and large organizations.

TrendAI™ Research

Frequently Asked Questions: The Petya Ransomware Outbreak

The Petya ransomware family has reemerged, becoming one of the most impactful yet. Is it similar to WannaCry? Does it have a kill switch? Here are some frequently asked questions about the threat.

TrendAI™ Research

What do Hackers do with Your Stolen Identity?

Identity theft is currently a gold mine for cybercriminals—one that reached an all-time high in 2016, with up to $16 billion worth of losses caused by fraud and identity theft. But what exactly happens with the stolen information?

TrendAI™ Research

Erebus Linux Ransomware: Impact to Servers and Countermeasures

A South Korean web hosting company was hit by a Linux version of the Erebus ransomware. Here’s what you need to know about the threat and what sysadmins can do to defend against it.

TrendAI™ Research

Securing Smart Cities

Cities around the world are getting smarter, but are they being designed with security in mind?

TrendAI™ Research

The State of SCADA HMI Vulnerabilities

A complete discussion of the different vulnerability categories, including case studies of vulnerable SCADA HMIs. The paper also provides a guide for vulnerability researchers, as well as vendors on quick and efficient bug discovery.

TrendAI™ Research

Protecting Home Networks: Start by Securing the Router

As home routers add more features, securing them becomes more difficult. End users should be aware of the effects of compromise, and how to protect their home routers.

TrendAI™ Research

WannaCry/Wcry Ransomware: How to Defend against It

Here’s what you need to know about this ongoing threat and what you can do to protect against it.

TrendAI™ Research

Rogue Robots: Testing the Limits of an Industrial Robot’s Security

The modern world relies heavily on industrial robots. But is the current robotics ecosystem secure enough to withstand a cyber attack?

TrendAI™ Research

Malware Using Exploits from Shadow Brokers Leak Reportedly in the Wild

Exploits found in the trove of malware recently leaked by hacking group Shadow Brokers are reportedly being used to install ransomware and backdoor. Are your systems protected?

TrendAI™ Research

From Espionage to Cyber Propaganda: Pawn Storm's Activities over the Past Two Years

This paper takes a look at Pawn Storm's operations within the last two years, and how the group has expanded their activities from espionage to the use of cyber propaganda tactics.

TrendAI™ Research

Ransomware Recap: Expanding Distribution Methods

This week's recap highlights new distribution methods that make ransomware more unpredictable in terms of how they infect their victims.

TrendAI™ Research

BrickerBot Malware Emerges, Permanently Bricks IoT Devices

A recently uncovered malware Brickerbot is making the rounds with the capability to permanently brick Internet of Things (IoT) devices. How can it be mitigated?

TrendAI™ Research

Shadow Brokers Leaks Hacking Tools: What it Means for Enterprises

Hacking group Shadow Brokers recently leaked a new trove of information-stealing tools and exploits targeting Windows systems and servers. What does this mean for enterprises?

TrendAI™ Research

Infosec Guide: Dealing with Threats to a Bring Your Own Device (BYOD) Environment

This Infosec Guide will tackle the primary threats organizations face when implementing BYOD programs, as well as best practices and solutions to mitigate these threats.

TrendAI™ Research

Operation Cloud Hopper: What You Need to Know

A global cyberespionage campaign has been uncovered compromising managed IT service providers, using them as in-betweens to attack their targets. Here’s what you need to know.

TrendAI™ Research

The Michelangelo Virus, 25 Years Later

The Michelangelo virus scare remains a significant turning point for computer security, 25 years after its supposed major impact,

TrendAI™ Research

US Cities Exposed in Shodan

An in-depth analysis of Shodan data reveals how some of the biggest US cities fare in terms of exposed cyber assets, what this means in terms of security, and how home users and organizations can protect their data.

TrendAI™ Research

Best Practices: Identifying and Mitigating Phishing Attacks

Despite being one of the oldest scams on the internet, phishing continues to be a significant problem for both individuals and organizations. Here are some methods to identify and deal with potential phishing attempts.

TrendAI™ Research

Security 101: Business Process Compromise

Past events show that attackers don't just target people, but processes as well. Enterprises should be aware of the of rising possibility of Business Process Compromises.

TrendAI™ Research

Securing Your Routers Against Mirai and Other Home Network Attacks

Cybercriminals can turn unsecure home routers into slaves for their botnets or even abuse them to steal banking credentials. Know about your router’s hidden weaknesses and the many ways you can defend your homes and businesses against these threats.

TrendAI™ Research

InfoSec Guide: Mitigating Email Threats

Email remains an important communication tool for business organizations. Unfortunately, its widespread use also makes it an ideal platform for cybercrime. Here are some tips for dealing with email-based threats.

TrendAI™ Research

A Rundown of the Biggest Cybersecurity Incidents of 2016

The most notable cybersecurity incidents of the past year, from the biggest data breaches and most expensive attacks to the most persistent attackers and impactful malware.

TrendAI™ Research

Yahoo Discloses 2013 Breach that Exposed Over One Billion Accounts

Yahoo disclosed yet another breach that exposed 1 billion user accounts in August 2013. This comes shortly after it announced a smaller but significant hack last September.

TrendAI™ Research

The Cybercriminal Roots of Selling Online Gaming Currency

The sale of online gaming currencies, while not illegal, has been found to have cybercriminal ties. This research paper covers how cybercriminals use the profits from the trade of these virtual currencies to fund other attacks.

TrendAI™ Research

Are Pagers Leaking Your Patients’ PHI?

With a little SDR knowledge and a $20 USB dongle, attackers can read unencrypted pager messages from tens of kilometers away. Who still uses pagers in this day and age? Healthcare facilities. Goodbye, PHI.

TrendAI™ Research

500 Million Yahoo Users Affected by Data Breach – Password Change Recommended

Yahoo users are prompted to change passwords as a massive breach compromises 500 million accounts.

TrendAI™ Research

Enterprise Network Protection: Protecting Data through Network Segmentation

An enterprise guide on network segmentation; how it works to secure large enterprise networks, why it's needed, and examples of some of the most widely used network models for different industries.

TrendAI™ Research

Ransomware-as-a-Service: Ransomware Operators Find Ways to Bring in Business

Cybercriminals are taking cues from legitimate enterprises and focusing on growing their operations. Different variations of ransomware-as-a-service show the evolving nature of the business.

TrendAI™ Research

Ransomware 101: What, How, and Why

This infographic shows how ransomware has evolved, how big the problem has become, and ways to avoid being a ransomware victim.

TrendAI™ Research

Billion-Dollar Scams: The Numbers Behind Business Email Compromise

Business Email Compromise schemes are one of the biggest threats to companies to date. One carefully crafted email sent to the right person can cost a company millions of dollars. How is it done and what makes it so effective?

TrendAI™ Research

Marcher Android Banking Malware Now Targeting UK Customers

Developers of the Android-based banking trojan Marcher updated the malware, adding major banks in United Kingdom to its list of targets.

TrendAI™ Research

Austrian Aeronautics Company Loses Over €42 Million to BEC Scam

Austria-based Fischer Advanced Composite Components AG (FACC), a major designer and manufacturer of aircraft components and systems, falls prey to a business email compromise (BEC) scheme that cost the company over 42 million euros in losses.

TrendAI™ Research

Keeping Digital Assets Safe: The Need for Data Classification

This primer discusses the importance of data classification, and how organizations can implement these strategies to reduce the effects should a data breach occur.

TrendAI™ Research

2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M

Long time users of Linkedin users may very well need to change their passwords once more as a cybercriminal puts the email addresses and passwords of 117 million users up for sale.

TrendAI™ Research

CryptXXX, 7ev3n Ransomware Get Major Updates

Newly-discovered ransomware strains, CryptXXX and 7ev3n, get major updates from malware authors.

TrendAI™ Research

Dark Motives Online: An Analysis of Overlapping Technologies Used by Cybercriminals and Terrorist Organizations

Research on the common technologies used by cybercriminals and terrorists to benefit their cause, from the services they abuse to the tools they’ve homebrewed to streamline activities.

TrendAI™ Research

Reveton Ransomware Descendant, CryptXXX Discovered

A new ransomware strain, CryptXXX, was recently discovered making its rounds since the tail-end of March.

TrendAI™ Research

Locky Ransomware Strain Led Kentucky Hospital to an “Internal State of Emergency”

Kentucky-based Methodist Hospital announced a ransomware attack that led to an “internal state of emergency.”

TrendAI™ Research

The Angler Connection: Massive Malvertising Campaign Linked to Angler Exploit Kit and BEDEP

Top news sites, entertainment portals, and political commentary sites were affected by a massive malvertising campaign related to the Angler Exploit Kit.

TrendAI™ Research

Internet of Things: Connected Life Security

The world is now more connected than ever. Gartner predicts 25 billion connected devices will be in use by 2020. How is this increased convenience affecting our privacy and security across the globe?

TrendAI™ Research

New Crypto-Ransomware Locky Uses Malicious Word Macros

A new crypto-ransomware type called Locky has been discovered riding on document-based macros and using infection techniques borrowed from the notorious banking malware DRIDEX.

TrendAI™ Research

Frequently Asked Questions: BlackEnergy

What we know about BlackEnergy, a Trojan known to have been used in attacks on Ukraine power providers that caused a massive outage in late 2015.

TrendAI™ Research

Operation Pawn Storm: Fast Facts and the Latest Developments

Operation Pawn Storm is an active economic and political cyber-espionage operation that has targeted high-profile entities from government institutions to media personalities. Here are its latest developments.

TrendAI™ Research

Ascending the Ranks: The Brazilian Cybercriminal Underground in 2015

Trend Micro's latest visit to the Brazilian cybercriminal underground reveals its latest trends and available services, from online banking malware to tutorial classes for new cybercriminals.

TrendAI™ Research

Security 101: Business Email Compromise (BEC) Schemes

The Federal Bureau of Investigation (FBI) released a public service announcement earlier this year warning about Business Email Compromise (BEC) schemes. Here’s what you need to know, and what you can do to prevent attacks.

TrendAI™ Research

First Malware-Driven Power Outage Reported in Ukraine

Malware found in power suppliers' systems may be responsible for causing a massive power outage in Ukraine.

TrendAI™ Research

Spear Phishing 101: What is Spear Phishing?

The objective of spear phishing and phishing are ultimately the same—to trick a target into opening an attachment or click on a malicious embedded link. But what is spear phishing? Learn more from this article.

TrendAI™ Research

Follow the Data: Dissecting Data Breaches and Debunking the Myths

A decade's worth of breaches has led to this. Forward-looking threat researcher Numaan Huq analyzes what has happened to the stolen data affecting major US industries. We map out the probabilities; see where the information goes and how much it's sold.

TrendAI™ Research

FBI Warns Public on Dangers of the Internet of Things

The FBI released a Public Service Announcement that warns about the potential security risks of the IoT. Learn more about these risks and their real-life consequences.

TrendAI™ Research

Virtual Patching in Mixed Environments: How It Protects You

A primer on the advantages of implementing virtual patching to protect systems against unpatched vulnerabilities.

TrendAI™ Research

Hacktivism 101: A Brief History and Timeline of Notable Incidents

While not done for profit, hacktivism has forced companies and organizations to face critical security challenges. Find out what it is and how it evolved from being the “Internet’s voice” to one of today's biggest security threats.

TrendAI™ Research

The Gaspot Experiment: How Gas-Tank-Monitoring Systems Could Make Perfect Targets for Attackers

In the US and other locations worldwide, gas stations are primarily privately owned. While most of them have been modernized, there are still a lot of risks tied to their business, especially those that are connected to the Internet.

TrendAI™ Research

Security On-The-Go: Setting up a Virtual Private Network (VPN)

There are privacy and security risks involved in connecting to public or 'free' Wi-fi hotspots. Here's a 4-step guide to setting up a virtual private network (VPN) for the times when you have to connect to unfamiliar networks.

TrendAI™ Research

Going Deeper: Exploring the Deep Web

An in-depth look into the duality of the Deep Web—how its anonymity allows free communication and the trade of illegal goods and services. See how it impacts the real world today, and how it could evolve over the next few years.

TrendAI™ Research

The Case for Making BYOD Safe

BYOD networks can benefit both the workers and the company, but it also presents a number of potential risks. This infographic details the challenges of balancing employee freedom, functionality, and security on BYOD.

TrendAI™ Research

How Operation Tropic Trooper Infiltrates Secret Keepers

This research paper offers a look into "Operation Tropic Trooper", an ongoing targeted attack campaign that uses old infiltration tactics to steal state and industry secrets since 2012.

TrendAI™ Research

Gone Phishing: How Phishing Leads to Hacked Accounts and Identity Theft

Phishing continues to be a popular method used by cybercriminals to trick users into giving out their personal information and credentials. Before you become a victim, learn about popular phishing techniques, and how to spot a phishing attempt.

TrendAI™ Research

Identity Theft and the Value of Your Personal Data

How dangerous is it to leave your personal information—your name, your social security number, your credit card and financial details, even your email address and phone number—where other people can access them?

TrendAI™ Research

Ransomware: What It Is and How You Can Protect Yourself

Ransomware is a type of malware that locks your computer screen and prevents you from accessing your files until you pay a “ransom”. Learn more about this type of malware and how you can prevent likely attacks.

TrendAI™ Research

World Backup Day: What, When, Where and Why You Need to Back up and How to do it

Observe World Backup Day by learning why you should back up, what to back up, where to store them, when you should do it, and how to do it.

TrendAI™ Research

Malvertising: When Online Ads Attack

Cybercriminals are increasingly using malicious advertisements as a platform for spreading malware. Find out how they work how you can protect yourself from these online threats.

TrendAI™ Research

Rocket Kitten Showing Its Claws: Operation Woolen-GoldFish and the GHOLE campaign

This research paper offers a look into the activities and methods used by Rocket Kitten, a group behind cyber attacks on Israeli and European organizations

TrendAI™ Research

Operation Arid Viper: Bypassing the Iron Dome

This Trend Micro paper unearths two separate but linked malware campaigns—Operation Arid Viper and Advtravel. Operation Arid Viper targets specific Israeli organizations using infrastructure in Germany with ties to Gaza in Palestine.

TrendAI™ Research

Millions Affected in Anthem Breach, Healthcare Companies Prime Attack Targets

Tens of millions of current and former customers and employees of Anthem Inc., the second largest health insurance provider in the United States, are reportedly affected in a targeted attack.

TrendAI™ Research

The Hack of Sony Pictures: What We Know and What You Need to Know

While Sony recovers from the massive hack, we continue to monitor investigations and developments. Here's a rundown of what happened, what was stolen, who’s being implicated, and tips on how you can defend against likely attacks. [updated]

TrendAI™ Research

From Cybercrime to Cyberspying: Using Limitless Keylogger and Predator Pain

A Trend Micro research paper that reveals the operations and cybercriminals behind Predator Pain and Limitless Keylogger, which are malware toolkits that are easily obtained from underground forums.

TrendAI™ Research

Pawn Storm Espionage Attacks Use Decoys, Deliver SEDNIT

This Trend Micro paper unravels a series of attacks that targets military officials and defense contractors. Dubbed as “Operation Pawn Storm,” the group of threat actors use two known attack vectors: spear phishing emails and a network of phishing websites.

TrendAI™ Research

What to Consider When Buying a Smart Device

Buying into the Internet of Things starts out with smart home devices. Unfortunately, connecting your home devices to the Internet has its drawbacks. Here are some important factors to consider before buying smart devices for the home.

TrendAI™ Research

PLEAD Campaign Attacks Taiwan Ministries

The PLEAD campaign is the second attack to target entities in Taiwan in the first half of 2014. Taiwanese agencies were also targeted in May using a Microsoft Word zero-day vulnerability.

TrendAI™ Research

.Bit Domain Used To Deliver Malware and other Threats

For many users, .com is the only domain that matters. But when cybercriminals start using .bit, a new kind of top-level domain (TLD) for malicious activities, people are bound to take notice.

TrendAI™ Research

Hacking Tools, Survey Scam Target Facebook Users

TrendAI™ Research