【ダイジェスト】ARTEXだけではない：日本を狙う3つの攻撃基盤に見るAI関与の実態
日本の組織を狙う攻撃で、AIはどこまで使われているのでしょうか。TrendAI™が独自に解析した3つの攻撃基盤から、工程全体の自動化、計画立案の支援、ツール作成の補助という関わり方の違いと、防御で押さえたい要点を紹介します。
2026年10月27日20 min read
Bakuei Matsukawa, Joseph C Chen
2026年10月27日
20 min read
Read article
TrendAI™ Deep Research
注目のリサーチ記事
2026年1～9月の国内公表インシデント607件から見える、公開システム対策の重要性
国内組織が2026年1～9月に公表したセキュリティインシデントは607件となり、2025年通年の594件を上回りました。公開情報の分析から見える被害の傾向と、組織が優先して見直したい対策を紹介します。
2026年10月26日 12 min
Read article
Webシェル侵害に備える：公開Webサーバを守る3つの視点
公開Webサーバの侵害は、その背後にあるデータベースや他のシステムへの被害につながります。国内のインシデント対応で得られた知見から、脆弱性への対処、被害の抑制、検知・復旧の要点を紹介します。
2026年10月26日 12 min
Read article
ランサムウェアと恐喝
ランサムウェアの次章：変わりゆくサイバー犯罪エコシステム
ランサムウェアは、暗号化を中心とする攻撃から、モジュール化された犯罪経済における収益化手段の一つへと進化しています。現在、中核的な商品となっているのはランサムウェアのペイロードではなく、被害組織の環境へのアクセスです。
2026年10月22日
Read article
リサーチ記事を検索
Site search
Filter by:
サイバー犯罪アンダーグラウンド
Looking Into the Void: Probing a Top Bulletproof Hosting Service
Cybercriminal groups cannot operate independently. To keep their operations up and running, they need specific services provided by third parties. We investigate one such business that has been integral to the activities of a number of high-profile gangs.
August 24th, 2022 3 min read
Read Article
サイバー犯罪
Metaworse? The Trouble with the Metaverse
Innovators are diving into a new and immersive virtual space, but with new technology comes new threats. We bring forward possible problematic issues that metaverse pioneers should be wary of.
August 8th, 2022 4 min read
Read Article
ランサムウェアと恐喝フィッシングとBEC
Ransomware Spotlight: BlackByte
BlackByte is a ransomware group that has been building a name for itself since 2021. Like its contemporaries, it has gone after critical infrastructure for a higher chance of getting a payout. What techniques sets it apart?
July 5th, 2022 8 min read
Read Article
暗号資産
The Crypto-Monetized Web: A Forward-Looking Thought Experiment
In past decades, we have seen how the web has drastically evolved. From the static, read-only version of Web 1.0, we have witnessed its transformation to its present mode — as the dynamic, interactive, and content creator-driven iteration that is Web 2.0.
June 30th, 2022 26 min read
Read Article
Cloud security
An Analysis of Azure Managed Identities Within Serverless Environments
We examine Azure’s Managed Identities service and its security capability in a threat model as developers’ go-to feature for managing secrets and credentials.
June 14th, 2022 5 min read
Read Article
サイバー犯罪APT
Exposing Earth Berberoka: A Multiplatform APT Campaign Targeting Online Gambling Sites
Our research uncovers the tools and techniques used by Earth Berberoka across different platforms to target online gambling sites.
May 24th, 2022 6 min read
Read Article
ランサムウェアと恐喝By The Numbers
LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022
This report delves into the ransomware threat landscape of the first quarter of 2022, with a focus on the three most successful ransomware families and the types of industries and organizations that were affected by their attacks.
May 23rd, 2022 10 min read
Read Article
ランサムウェアと恐喝
Ransomware Spotlight: RansomEXX
RansomEXX is a ransomware variant that gained notoriety after a spate of attacks in 2020 and continues to be active today. With its targeted nature and history for choosing high-profile victims, we shine our spotlight on RansomEXX to reveal its tactics, techniques, and procedures.
May 17th, 2022 9 min read
Read Article
Cloud security設定ミス
Crafting an Azure App Services Threat Model
We looked into Azure App Services and created a threat model to mitigate the impact of threats on the infrastructure and applications.
May 4th, 2022 8 min read
Read Article
Cloud security
How Cybercriminals Abuse Cloud Tunneling Services
Our research examines how cloud tunneling services work and how organizations can thwart threats that abuse them.
April 26th, 2022 24 min read
Read Article