Skip to main content

TrendAI™
セキュリティブログ

TrendAI Security Blog

注目のブログ

BotnetsIoTとスマートデバイス
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
Woman working on her desk
仮想パッチ：正式パッチの提供前に、より早く保護する
2026年11月1日
Sundari Parekh
Read article
エクスプロイトとゼロデイ
「Node2Shell」の原因となったBrotliの脆弱性：修正対象と見落としやすい組み込み先
2026年10月28日 6 min
TrendAI™ Research
Read article

ブログ記事を検索

マルウェア
Related CherryBlos and FakeTrade Android Malware Involved in Scam Campaigns

Trend Micro’s Mobile Application Reputation Service (MARS) team discovered two new related Android malware families involved in cryptocurrency-mining and financially-motivated scam campaigns targeting Android users.

July 28th, 2023 9 min read TrendAI™ Research
Read Article
Tailing Big Head Ransomware’s Variants, Tactics, and Impact

We analyze the technical details of a new ransomware family named Big Head. In this entry, we discuss the Big Head ransomware’s similarities and distinct markers that add more technical details to initial reports on the ransomware.

July 7th, 2023 12 min read Ieriz Nicolle Gonzalez, Katherine Casona, Sarah Pearl Camiling
Read Article
マルウェア
Malvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy Terminator

We found that malicious actors used malvertising to distribute malware via cloned webpages of legitimate organizations. The distribution involved a webpage of the well-known application WinSCP, an open-source Windows application for file transfer. We were able to identify that this activity led to a BlackCat (aka ALPHV) infection, and actors also used SpyBoy, a terminator that tampers with protection provided by agents.

June 30th, 2023 9 min read Lucas Silva, RonJay Caragay, Arianne Dela Cruz, Gabriel Cardoso
Read Article
サイバー脅威
Impulse Team’s Massive Years-Long Mostly-Undetected Cryptocurrency Scam

We have been able to uncover a massive cryptocurrency scam involving more than a thousand websites handled by different affiliates linked to a program called Impulse Project, run by a threat actor named Impulse Team.

June 6th, 2023 11 min read Cedric Pernet, Joseph C Chen
Read Article
マルウェア
New Info Stealer Bandit Stealer Targets Browsers, Wallets

This is an analysis of Bandit Stealer, a new Go-based information-stealing malware capable of evading detection as it targets multiple browsers and cryptocurrency wallets.

May 26th, 2023 9 min read Sarah Pearl Camiling, Paul John Bardon
Read Article
BlackCat Ransomware Deploys New Signed Kernel Driver

In this blog post, we will provide details on a BlackCat ransomware incident that occurred in February 2023, where we observed a new capability, mainly used for the defense evasion phase.

May 22nd, 2023 10 min read Mahmoud Zohdy, Sherif Magdy, Mohamed Fahmy
Read Article
Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices

An overview of the Lemon Group’s use of preinfected mobile devices, and how this scheme is potentially being developed and expanded to other internet of things (IoT) devices. This research was presented in full at the Black Hat Asia 2023 Conference in Singapore in May 2023.

May 17th, 2023 10 min read Fyodor Yarochkin, Zhengyu Dong, Paul Pajares
Read Article
Cloud
3 Types of Cross-Site Scripting (XSS) Attacks

Cybersecurity is a major concern online, and hackers can use multiple vectors to target your website. Learn about the three types of cross-site scripting (XSS) cyberattacks, how they overlap, and how to mitigate XSS vulnerabilities in your projects.

May 11th, 2023 7 min read TrendAI™ Research
Read Article
Securing Cloud-Native Environments with Zero Trust: Real-World Attack Cases

The zero trust security model, which assumes that everything and everyone is a potential threat, is an approach to security that is becoming increasingly popular, especially in and for cloud-native environments.

March 31st, 2023 13 min read
Read Article
Pack it Secretly: Earth Preta’s Updated Stealthy Strategies

Earth Preta has actively been changing its tools, tactics, and procedures (TTPs) to bypass security solutions. In this blog entry, we will introduce and analyze the tools and malware used by the threat actor in its most recent campaigns.

March 23rd, 2023 22 min read Vickie Su, Nick Dai, Sunny Lu
Read Article