Skip to main content

TrendAI™
セキュリティブログ

TrendAI Security Blog

注目のブログ

BotnetsIoTとスマートデバイス
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
Woman working on her desk
Virtual Patching: Protect Sooner, Before the Patch Lands
2026年11月1日
Sundari Parekh
Read article
エクスプロイトとゼロデイ
「Node2Shell」の原因となったBrotliの脆弱性：修正対象と見落としやすい組み込み先
2026年10月28日 6 min
TrendAI™ Research
Read article

ブログ記事を検索

Cloudネットワーク
ZTNA vs VPN: Secure Remote Work and Access

Explore the drivers behind switching from VPN to Zero Trust Network Access (ZTNA) for any device access from anywhere.

March 14th, 2023 7 min read TrendAI™ Research
Read Article
マルウェア
Emotet Returns, Now Adopts Binary Padding for Evasion

Following a three-month hiatus, Emotet spam activities resumed in March 2023, when a botnet known as Epoch 4 began delivering malicious documents embedded in Zip files that were attached to the emails.

March 13th, 2023 5 min read Ian Kenefick
Read Article
Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting

We detail the update that advanced persistent threat (APT) group Iron Tiger made on the custom malware family SysUpdate. In this version, we also found components that enable the malware to compromise Linux systems.

March 1st, 2023 14 min read Daniel Lunghi
Read Article
Invitation to a Secret Event: Uncovering Earth Yako’s Campaigns

We detail the intrusion set Earth Yako, attributed to the campaign Operation RestyLink or EneLink. This analysis was presented in full at the JSAC 2023 in January 2023.

February 16th, 2023 15 min read Hara Hiroaki, Yuka Higashi, Masaoki Shoji
Read Article
マルウェア
Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs

We discovered an active campaign targeting Eastern Europeans in the cryptocurrency industry using fake job lures.

February 9th, 2023 11 min read Aliakbar Zahravi, Peter Girnus
Read Article
ランサムウェアと恐喝
New Mimic Ransomware Abuses Everything APIs for its Encryption Process

Trend Micro researchers discovered a new ransomware that abuses the APIs of a legitimate tool called Everything, a Windows filename search engine developed by Voidtools that offers quick searching and real-time updates for minimal resource usage.

January 26th, 2023 5 min read Nathaniel Morales, Earle Maui Earnshaw, Don Ovid Ladores, Nick Dai…
Read Article
マルウェア
IcedID Botnet Distributors Abuse Google PPC to Distribute Malware

We analyze the latest changes in IcedID botnet from a campaign that abuses Google pay per click (PPC) ads to distribute IcedID via malvertising attacks.

December 23rd, 2022 5 min read Ian Kenefick
Read Article
APT
Raspberry Robin Malware Targets Telecom, Governments

We found samples of the Raspberry Robin malware spreading in telecommunications and government office systems beginning September. The main payload itself is packed with more than 10 layers for obfuscation and is capable of delivering a fake payload once it detects sandboxing and security analytics tools.

December 20th, 2022 12 min read Christopher So
Read Article
Cloud
Linux Cryptocurrency Mining Attacks Enhanced via CHAOS RAT

We intercepted a cryptocurrency mining attack that incorporated an advanced remote access trojan (RAT) named the CHAOS Remote Administrative Tool.

December 12th, 2022 3 min read David Fiser, Alfredo Oliveira
Read Article
APT
Earth Preta Spear-Phishing Governments Worldwide

We break down the cyberespionage activities of advanced persistent threat (APT) group Earth Preta, observed in large-scale attack deployments that began in March. We also show the infection routines of the malware families they use to infect multiple sectors worldwide: TONEINS, TONESHELL, and PUBLOAD.

November 18th, 2022 17 min read Nick Dai, Vickie Su, Sunny Lu
Read Article