Skip to main content

TrendAI™
보안 블로그

TrendAI 보안 블로그

추천 블로그

Cyber crime
Negasteal Uses Hastebin for Fileless Delivery of Crysis Ransomware

We discovered a Negasteal variant that uses hastebin to filelessly deliver Crysis ransomware to the victim's system.

Read Article
Cyber crimeAPTs
Using MITRE ATT&CK to Identify an APT Attack

We analyzed the tools, relationships, and behaviors used in a long-standing intrusion of a company after its security team observed malicious C&C traffic.

Read Article
IoT & smart devices
A Security Guide to IoT-Cloud Convergence

The integration of the IoT and cloud computing poses new possibilities for industries. It is important not to overlook their respective security risks and the measures to take against them when the two technologies converge.

Read Article
Exploits & Zero-DaysIoT & smart devices
Securing IoT Apps

Many work-from-home employees use devices for personal and business purposes in home networks that are not as secure as that of the office. This article discusses the threats to unsecure IoT apps and provides ways to secure them.

Read Article
Analysis of Kinsing Malware's Use of Rootkit

Several shell scripts accompany Kinsing. These shell scripts are responsible for downloading and installing, removing, and uninstalling various resource-intensive services and processes. This blog post focuses on the role of the rootkit component.

Read Article
Cloud security
Navigating Gray Clouds: The Importance of Visibility in Cloud Security

The big move to the cloud has already happened for majority of enterprises and organizations who are invested in providing unhampered, future-proof services. But how can they prioritize visibility in a cloud-first world?

Read Article
Ransomware & extortion
Malicious Actors Target Comm Apps such as Zoom, Slack, Discord

Communication apps have caught the eye of malicious actors who are always looking to integrate new techniques in their malicious activities.

Read Article
Cyber crime
COVID-19 Used in Malicious Campaigns

Threat actors take advantage of the spread of COVID-19 for malicious campaigns. Goods and services related to the virus also appear in underground marketplaces and cybercriminal forums.

Read Article
Ransomware & extortion
Ryuk 2020: Distributing Ransomware via TrickBot and BazarLoader

Starting this year, Ryuk began using another dropper called BazarLoader (also known as BazarBackdoor), which is primarily distributed via phishing emails that contain either malicious attachments or links to websites that host malware.

Read Article
Cloud security
Docker Content Trust: What It Is and How It Secures Container Images

Can your container image be trusted? Learn how Docker Content Trust (DCT) employs digital signatures for container image verification and manages trusted collections of content.

Read Article