Skip to main content

TrendAI™
보안 블로그

TrendAI 보안 블로그

추천 블로그

Malware
Google Play Apps Drop Anubis, Use Motion-based Evasion

We found malicious apps on Google Play trying to drop a banking malware payload on unsuspecting users. Motion sensor data was used to evade detection.

Read Article
Disguised Adware Infect 9 Million Google Play Users

We recently discovered an active adware family (detected by Trend Micro as AndroidOS_HidenAd) disguised as 85 game, TV, and remote control simulator apps on the Google Play store.

Read Article
Malware
Security 101: Defending Against Fileless Malware

Fileless threats aren’t as visible compared to traditional malware and employ a variety of techniques to stay persistent. Here's a closer look at how fileless malware work and what can be done to thwart them.

Read Article
Malware
Malicious Memes that Communicate with Malware

We recently discovered malicious actors using steganography on memes. It should be noted that the malware was not downloaded from Twitter and that we did not observe what specific mechanism was used to deliver the malware to its victims.

Read Article
Hacker Infects Node.js Package to Steal from Bitcoin Wallets

A Node.js module with nearly two million downloads a week was compromised after the library was injected with malicious code programmed to steal bitcoins in wallet apps.

Read Article
AutoIt-Compiled Worm Sends Fileless BLADABINDI/njRAT

BLADABINDI’s customizability and seeming availability in the underground make it a prevalent threat. Last week, we came across a worm (Worm.Win32.BLADABINDI.AA) that propagates through removable drives and installs a fileless version of BLADABINDI.

Read Article
Malware
Fake Banking App Found on Google Play Used in SMiShing

As users start to look for apps and other services from their banks, opportunities for scammers also increase. One recent example of this is the app Movil Secure, part of a SMiShing scheme targeting Spanish-speaking users.

Read Article
Exploits & Zero-Days
Virtual Patching: Patch Those Vulnerabilities before They Can Be Exploited

The average organization takes over 30 days to patch operating systems and software, and longer for more complex business applications and systems. This infographic shows how virtual patching solutions can help mitigate threats from vulnerabilities.

Read Article
Targeted attacks
LoJax UEFI Rootkit Used in Cyberespionage

Security researchers came across a Unified Extensible Firmware Interface (UEFI) rootkit in the wild being used for cyberespionage. Named LoJax, the rootkit is reportedly packaged with other tools that modifies the system’s firmware to infect it with malware.

Read Article
Cyber crime
.EGG Files in Spam Delivers GandCrab v4.3 Ransomware to South Korean Users

We discovered spam mails abusing EGG (.egg) files to deliver the GandCrab v4.3 ransomware. Additionally, the operators behind the spam mails appear to be specifically going after South Korean users, as evidenced by the use of Hangul in the spam mails.

Read Article