
TrendAI™
보안 블로그

추천 블로그

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
Virtual Patching: Protect Sooner, Before the Patch Lands
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
연구 논문 검색
Filter by:
Google Play Apps Drop Anubis, Use Motion-based Evasion
We found malicious apps on Google Play trying to drop a banking malware payload on unsuspecting users. Motion sensor data was used to evade detection.
Disguised Adware Infect 9 Million Google Play Users
We recently discovered an active adware family (detected by Trend Micro as AndroidOS_HidenAd) disguised as 85 game, TV, and remote control simulator apps on the Google Play store.
Security 101: Defending Against Fileless Malware
Fileless threats aren’t as visible compared to traditional malware and employ a variety of techniques to stay persistent. Here's a closer look at how fileless malware work and what can be done to thwart them.
Malicious Memes that Communicate with Malware
We recently discovered malicious actors using steganography on memes. It should be noted that the malware was not downloaded from Twitter and that we did not observe what specific mechanism was used to deliver the malware to its victims.
Hacker Infects Node.js Package to Steal from Bitcoin Wallets
A Node.js module with nearly two million downloads a week was compromised after the library was injected with malicious code programmed to steal bitcoins in wallet apps.
AutoIt-Compiled Worm Sends Fileless BLADABINDI/njRAT
BLADABINDI’s customizability and seeming availability in the underground make it a prevalent threat. Last week, we came across a worm (Worm.Win32.BLADABINDI.AA) that propagates through removable drives and installs a fileless version of BLADABINDI.
Fake Banking App Found on Google Play Used in SMiShing
As users start to look for apps and other services from their banks, opportunities for scammers also increase. One recent example of this is the app Movil Secure, part of a SMiShing scheme targeting Spanish-speaking users.
Virtual Patching: Patch Those Vulnerabilities before They Can Be Exploited
The average organization takes over 30 days to patch operating systems and software, and longer for more complex business applications and systems. This infographic shows how virtual patching solutions can help mitigate threats from vulnerabilities.
LoJax UEFI Rootkit Used in Cyberespionage
Security researchers came across a Unified Extensible Firmware Interface (UEFI) rootkit in the wild being used for cyberespionage. Named LoJax, the rootkit is reportedly packaged with other tools that modifies the system’s firmware to infect it with malware.
.EGG Files in Spam Delivers GandCrab v4.3 Ransomware to South Korean Users
We discovered spam mails abusing EGG (.egg) files to deliver the GandCrab v4.3 ransomware. Additionally, the operators behind the spam mails appear to be specifically going after South Korean users, as evidenced by the use of Hangul in the spam mails.