サイバープロパガンダGenerative AI
Matryoshkaが再び活動：AI生成の虚偽の主張で米国中間選挙の候補者を標的に
2026年11月2日2 min read
Asako Koizumi, Philippe Lin
2026年11月2日
2 min read
Read article
TrendAI™
セキュリティブログ
注目のブログ
BotnetsIoTとスマートデバイス
TrendAI™ Research、出荷前から感染していた130万台超のセットトップボックスによるボットネットの無力化に貢献
TrendAI™ Researchが数カ月にわたり提供してきたインテリジェンスが、出荷前から感染していた130万台超のセットトップボックスによるボットネットの無力化に貢献しました。本記事では、このボットネットの運営の仕組みと影響、そして無力化が防御側にとって持つ意味を解説します。
2026年11月2日 15 min
Read article
仮想パッチ：正式パッチの提供前に、より早く保護する
2026年11月1日
Read article
エクスプロイトとゼロデイ
「Node2Shell」の原因となったBrotliの脆弱性：修正対象と見落としやすい組み込み先
2026年10月28日 6 min
Read article
ブログ記事を検索
Site search
Filter by:
ランサムウェアと恐喝
Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal
In this blog entry, we discuss how the Black Basta and Cactus ransomware groups utilized the BackConnect malware to maintain persistent control and exfiltrate sensitive data from compromised machines.
March 3rd, 2025 12 min read
Read Article
AICloud security
AI in the Crosshairs: Understanding and Detecting Attacks on AWS AI Services with Trend Vision One™
This article offers a fresh perspective on AI security, emphasizing that while core AI models are often the focus, the surrounding infrastructure and cloud services are equally critical to securing AI applications, particularly with the rise of AI-as-a-Service.
February 27th, 2025 22 min read
Read Article
Updated Shadowpad Malware Leads to Ransomware Deployment
In this blog entry, we discuss how Shadowpad is being used to deploy a new undetected ransomware family. Attackers deploy the malware by exploiting weak passwords and bypassing multi-factor authentication.
February 20th, 2025 12 min read
Read Article
マルウェア
Earth Preta Mixes Legitimate and Malicious Components to Sidestep Detection
Our Threat Hunting team discusses Earth Preta’s latest technique, in which the APT group leverages MAVInject and Setup Factory to deploy payloads, and maintain control over compromised systems.
February 18th, 2025 6 min read
Read Article
AI
CES 2025: A Comprehensive Look at AI Digital Assistants and Their Security Risks
In this entry, we mapped the capabilities of various AI digital assistants that were showcased at CES 2025 based on an assessment matrix we developed to determine how this emerging technology holds up against potential security threats.
February 10th, 2025 12 min read
Read Article
マルウェア
Chinese-Speaking Group Manipulates SEO with BadIIS
This blog post details our analysis of an SEO manipulation campaign targeting Asia. We also share recommendations that can help enterprises proactively secure their environment.
February 7th, 2025 5 min read
Read Article
エクスプロイトとゼロデイ
CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks
The Trend ZDI team offers an analysis on how CVE-2025-0411, a zero-day vulnerability in 7-Zip, was actively exploited to target Ukrainian organizations in a SmokeLoader campaign involving homoglyph attacks.
February 4th, 2025 12 min read
Read Article
サイバー脅威
Lumma Stealer’s GitHub-Based Delivery Explored via Managed Detection and Response
The Managed XDR team investigated a sophisticated campaign distributing Lumma Stealer through GitHub, where attackers leveraged the platform's release infrastructure to deliver malware such as SectopRAT, Vidar, and Cobeacon.
January 30th, 2025 16 min read
Read Article
Invisible Prompt Injection: A Threat to AI Security
This article explains the invisible prompt injection, including how it works, an attack scenario, and how users can protect themselves.
January 22nd, 2025 4 min read
Read Article
IoTとスマートデバイス
IoT Botnet Linked to Large-scale DDoS Attacks Since the End of 2024
Since the end of 2024, we have been continuously monitoring large-scale DDoS attacks orchestrated by an IoT botnet exploiting vulnerable IoT devices such as wireless routers and IP cameras.
January 17th, 2025 11 min read
Read Article