Skip to main content

TrendAI™
보안 블로그

TrendAI 보안 블로그

추천 블로그

ASM ASRM
A MyKings Retrospective: Using the MITRE ATT&CK Matrix for Increased Visibility

We take a closer look at an incident involving the MyKings botnet to show how the MITRE ATT&CK framework helps with threat investigation.

Read Article
Cyber crime
Trend Micro Discloses Insider Threat

A security incident resulted in the unauthorized disclosure of personal data of an isolated number of customers of our consumer product. We immediately started investigating the situation and found it was the result of a malicious insider threat.

Read Article
Cryptocurrency
Defending Systems Against Cryptocurrency Miner Malware

A look into cryptocurrencies' state and how cybercriminals abuse miner malware to profit at the expense of legitimate businesses, how to find signs of infection, and recommendations to defend systems from its abuse.

Read Article
Cloud security
The Cloud: What it is and what it's for

From powering video streaming, web-based apps, customer relationship management (CRM) systems, mobile banking, inventory, and big data analyses, the cloud is helping empower businesses of all sizes to focus on innovation rather than infrastructure.

Read Article
Exploits & Zero-Days
Security 101: Zero-Day Vulnerabilities and Exploits

A zero-day attack exploits an unpatched vulnerability. Until a patch becomes available, it is often a race between threat actors trying to exploit the flaw and vendors or developers rolling out a patch to fix it.

Read Article
Cyber threats
Skidmap Malware Uses Rootkit to Hide Mining Payload

Skidmap, a Linux malware that we recently stumbled upon, demonstrates the increasing complexity of cryptocurrency-mining threats. This malware is notable for how it loads malicious kernel modules to keep its cryptocurrency mining operations hidden.

Read Article
Cyber crime
Texas Municipalities Hit by REvil/Sodinokibi Paid No Ransom, Over Half Resume Operations

Cybercriminals who held to ransom the files of 22 Texas local government units for a combined ransom amount of US$2.5 million did not get a single cent, according to Texas state officials.

Read Article
‘Purple Fox’ Malware Can Rootkit and Abuse PowerShell

This new iteration of Purple Fox that we came across, delivered by Rig, has a few new tricks up its sleeve. It retains its rootkit component by abusing publicly available code. It also abuses PowerShell making it capable of fileless infection.

Read Article
Cloud security
Container Security in Six Steps

The complexity of container infrastructure, if not properly accounted for, can pose serious security risks. To minimize risks when building in containers, we came up with six steps that developers can follow.

Read Article
Cyber crimeDeepfakes
Unusual CEO Fraud via Deepfake Audio Steals US$243,000 From UK Company

An unusual case of CEO fraud used a deepfake audio, an artificial intelligence (AI)-generated audio, and was reported to have conned US$243,000 from a U.K.-based energy company.

Read Article