サイバープロパガンダGenerative AI
Matryoshka Returns, Targeting US Midterm Candidates With AI-Generated Fake Claims
2026年11月2日2 min read
Asako Koizumi, Philippe Lin
2026年11月2日
2 min read
Read article
TrendAI™
セキュリティブログ
注目のブログ
BotnetsIoTとスマートデバイス
TrendAI™ Research、出荷前から感染していた130万台超のセットトップボックスによるボットネットの無力化に貢献
TrendAI™ Researchが数カ月にわたり提供してきたインテリジェンスが、出荷前から感染していた130万台超のセットトップボックスによるボットネットの無力化に貢献しました。本記事では、このボットネットの運営の仕組みと影響、そして無力化が防御側にとって持つ意味を解説します。
2026年11月2日 15 min
Read article
仮想パッチ：正式パッチの提供前に、より早く保護する
2026年11月1日
Read article
エクスプロイトとゼロデイ
「Node2Shell」の原因となったBrotliの脆弱性：修正対象と見落としやすい組み込み先
2026年10月28日 6 min
Read article
ブログ記事を検索
Site search
Filter by:
エクスプロイトとゼロデイ
Threat Actor Groups, Including Black Basta, are Exploiting Recent ScreenConnect Vulnerabilities
This blog entry gives a detailed analysis of these recent ScreenConnect vulnerabilities. We also discuss our discovery of threat actor groups, including Black Basta and Bl00dy Ransomware gangs, that are actively exploiting CVE-2024-1708 and CVE-2024-1709 based on our telemetry.
February 27th, 2024 8 min read
Read Article
ランサムウェアと恐喝
LockBit Attempts to Stay Afloat With a New Version
This research is the result of our collaboration with the National Crime Agency in the United Kingdom, who took action against LockBit as part of Operation Cronos, an international effort resulting in the undermining of its operations.
February 22nd, 2024 15 min read
Read Article
Earth Preta Campaign Uses DOPLUGS to Target Asia
In this blog entry, we focus on Earth Preta's campaign that employed a variant of the DOPLUGS malware to target Asian countries.
February 20th, 2024 14 min read
Read Article
CVE-2024-21412: Water Hydra Targets Traders With Microsoft Defender SmartScreen Zero-Day
The APT group Water Hydra has been exploiting the Microsoft Defender SmartScreen vulnerability (CVE-2024-21412) in its campaigns targeting financial market traders. This vulnerability, which has now been patched by Microsoft, was discovered and disclosed by the Trend Micro Zero Day Initiative.
February 13th, 2024 16 min read
Read Article
Deepfakes
CFO（最高財務責任者）になりすまして2500万米ドルを送金させたディープフェイク技術
ディープフェイク技術を用いた偽のビデオ会議にだまされた香港の金融関係者が詐欺グループに多額の送金を行いました。ディープフェイク技術の悪用に対抗するためには、技術的側面と心理的側面の両面において対策を講じる必要があります。
February 7th, 2024 4 min read
Read Article
APT
Pawn Storm Uses Brute Force and Stealth Against High-Value Targets
To help defenders learn more about Pawn Storm's activities and adjust their defenses, we offer a technical analysis of some of the threat actor's recent and updated techniques.
January 31st, 2024 12 min read
Read Article
CVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign
This blog delves into the Phemedrone Stealer campaign's exploitation of CVE-2023-36025, the Windows Defender SmartScreen Bypass vulnerability, for its defense evasion and investigates the malware's payload.
January 12th, 2024 12 min read
Read Article
エクスプロイトとゼロデイ
CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits
We uncovered the active exploitation of the Apache ActiveMQ vulnerability CVE-2023-46604 to download and infect Linux systems with the Kinsing malware (also known as h2miner) and cryptocurrency miner.
November 20th, 2023 5 min read
Read Article
APT
Earth Estries Targets Government, Tech for Cyberespionage
We break down a new cyberespionage campaign deployed by a cybercriminal group we named Earth Estries. Analyzing the tactics, techniques, and procedures (TTPs) employed, we observed overlaps with the advanced persistent threat (APT) group FamousSparrow as Earth Estries targets governments and organizations in the technology sector.
August 30th, 2023 12 min read
Read Article
ランサムウェアと恐喝
An Overview of the New Rhysida Ransomware Targeting the Healthcare Sector
In this blog entry, we will provide details on Rhysida, including its targets and what we know about its infection chain.
August 9th, 2023 6 min read
Read Article