Skip to main content

TrendAI™
보안 블로그

TrendAI 보안 블로그

추천 블로그

Ransomware & extortion
Ryuk Ransomware Infects US Government Contractor

US government contractor Electronic Warfare Associates (EWA) was infected with Ryuk ransomware, compromising web servers and subsidiary websites.

Read Article
Cyber crime
New Extortion Campaign Threatens Victims of the 2015 Ashley Madison Breach

5 years after the Ashley Madison breach, cybercriminals still capitalize on the incident by introducing a new sextortion scheme.

Read Article
MalwareCyber crime
Emotet Uses Coronavirus Scare in Latest Campaign, Targets Japan

Cybercriminals used the 2019-nCoV scare to trick people into downloading email attachments that carry the Emotet malware.

Read Article
Cyber crime
3 Indonesian Hackers Arrested for Global Magecart Attacks, Other Members Still at Large

The Interpol, together with the Indonesian National Police, announced the arrest of three Indonesian men suspected of being behind Magecart attacks.

Read Article
Cyber crime
Google, Mozilla Crack Down on Malicious Extensions and Add-ons

Google indefinitely suspends extensions that use the Chrome Web Store payments while Mozilla bans 197 add-ons in a quest to halt fraudulent activities.

Read Article
Software supply chain
Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers

An unsecured Amazon S3 bucket was found leaking the data of more than 30,000 individuals. It was discovered to have exposed 85,000 files that included records with sensitive personally identifiable information (PII).

Read Article
Phishing & BEC
NetWire RAT Hidden in IMG Files Deployed in BEC Campaign

A recent BEC campaign targets organizations by sending them emails with IMG (disk imaging) file attachments hiding a NetWire remote access trojan.

Read Article
Cyber crime
Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment

A new sextortion scheme threatens to expose nude videos supposedly captured via victims' mobile phones and home cameras.

Read Article
IoT & smart devices
Hacker Publishes Credentials for Over 515,000 Servers, Routers, and IoT Devices

A hacker published a massive list of Telnet usernames and passwords for more than 515,000 servers, routers, and IoT devices.

Read Article
Exploits & Zero-Days
Microsoft Releases Advisory on Zero-Day Vulnerability CVE-2020-0674, Workaround Provided

On January 17, Microsoft published an advisory (ADV200001) warning users about CVE-2020-0674, a remote code execution (RCE) vulnerability involving Microsoft’s Internet Explorer (IE) web browser.

Read Article