サイバープロパガンダGenerative AI
Matryoshka Returns, Targeting US Midterm Candidates With AI-Generated Fake Claims
2026年11月2日2 min read
Asako Koizumi, Philippe Lin
2026年11月2日
2 min read
Read article
TrendAI™
セキュリティブログ
注目のブログ
BotnetsIoTとスマートデバイス
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
2026年11月2日 15 min
Read article
Virtual Patching: Protect Sooner, Before the Patch Lands
2026年11月1日
Read article
エクスプロイトとゼロデイ
「Node2Shell」の原因となったBrotliの脆弱性：修正対象と見落としやすい組み込み先
2026年10月28日 6 min
Read article
ブログ記事を検索
Site search
Filter by:
ゼロトラスト
Zero Trust: Enforcing Business Risk Reduction Through Security Risk Reduction
Unlike traditional legacy trust models where security is not always present in all cases, Zero Trust revolves around an ”always-on everywhere” approach.
November 2nd, 2022 5 min read
Read Article
ランサムウェアと恐喝
LV Ransomware Exploits ProxyShell in Attack on a Jordan-based Company
Our blog entry provides a look at an attack involving the LV ransomware on a Jordan-based company from an intrusion analysis standpoint
October 25th, 2022 7 min read
Read Article
サイバー脅威
Black Basta Ransomware Gang Infiltrates Networks via QAKBOT, Brute Ratel, and Cobalt Strike
We analyzed a QAKBOT-related case leading to a Brute Ratel C4 and Cobalt Strike payload that can be attributed to the threat actors behind the Black Basta ransomware.
October 12th, 2022 8 min read
Read Article
エクスプロイトとゼロデイ
Bridging Security Gaps in WFH and Hybrid Setups
Remote and hybrid workplaces are now the norm. We highlight some risks and threats to these setups and detail recommendations for organizations to keep their diffused labor pool secure.
October 5th, 2022 3 min read
Read Article
ランサムウェアと恐喝
Play Ransomware's Attack Playbook Similar to that of Hive, Nokoyawa
Play is a new ransomware that takes a page out of Hive and Nokoyawa's playbook. The many similarities among them indicate that Play, like Nokoyawa, are operated by the same people.
September 6th, 2022 8 min read
Read Article
New Golang Ransomware Agenda Customizes Attacks
A new piece of ransomware written in the Go language has been targeting healthcare and education enterprises in Asia and Africa. This ransomware is called Agenda and is customized per victim.
August 25th, 2022 8 min read
Read Article
ランサムウェアと恐喝
Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus
We investigate mhyprot2.sys, a vulnerable anti-cheat driver for the popular role-playing game Genshin Impact. The driver is currently being abused by a ransomware actor to kill antivirus processes and services for mass-deploying ransomware.
August 24th, 2022 9 min read
Read Article
Iron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users
We found APT group Iron Tiger's malware compromising chat application Mimi’s servers in a supply chain attack.
August 12th, 2022 8 min read
Read Article
マルウェア
Examining New DawDropper Banking Dropper and DaaS on the Dark Web
In this blog post, we discuss the technical details of a new banking dropper that we have dubbed DawDropper, give a brief history of banking trojans released in early 2022 that use malicious droppers, and elaborate on cybercriminal activities related to DaaS in the deep web.
July 29th, 2022 5 min read
Read Article
マルウェア
Analyzing Penetration-Testing Tools That Threat Actors Use to Breach Systems and Steal Data
We discovered the use of two Python penetration-testing tools, Impacket and Responder, that malicious actors used to compromise systems and exfiltrate data. We share our key findings in this report.
July 20th, 2022 10 min read
Read Article