Skip to main content

TrendAI™
보안 블로그

TrendAI 보안 블로그

추천 블로그

Exploits & Zero-Days
Over 200,000 MikroTik Routers Compromised in Cryptojacking Campaign

Security researchers uncovered a cryptojacking campaign that exploits a vulnerability in MikroTik routers to inject a malicious version of Coinhive. Here’s what you need to know.

Read Article
Malware
Fileless Malware PowerGhost Targets Corporate Systems

A new fileless malware utilizes Powershell and EternalBlue via WMI for propagation, infecting workstations and servers connected to a local server with a cryptocurrency miner and a DDos tool. Significant infections have been detected in North America and Europ

Read Article
Phishing & BEC
FBI Report: Global BEC Losses Exceeded US$12 Billion in 2018

The Federal Bureau of Investigation (FBI) issued a public service announcement (PSA) regarding the continued increase of Business Email Compromise (BEC) scams, which total global losses have already reached over US$12 billion in 2018.

Read Article
Cloud security
Security by Design: A Checklist for Safeguarding Virtual Machines and Containers

Here are some considerations and best practices that developers, IT operations professionals, and system administrators should take into account in securing the infrastructures that power the applications they use.

Read Article
FacexWorm Abuses Facebook Messenger for Propagation

Our Cyber Safety Solutions team identified a malicious Chrome extension we named FacexWorm, which uses a miscellany of techniques to target cryptocurrency trading platforms accessed on an affected browser and propagates via Facebook Messenger.

Read Article
Cyber crime
Curbing the BEC Problem Using AI and Machine Learning

Due to BEC’s evolving and treacherous nature, run-of-the-mill best practices and security solutions have become weak to withstand attacks. Find out how advanced solutions that utilize artificial intelligence and machine learning help in defending against BEC.

Read Article
Cloud security
Serverless Applications: What They Mean in DevOps

Analysis of over 1,000 open-source serverless applications revealed that 21% of them have critical vulnerabilities or were misconfigured. What does this mean for DevOps?

Read Article
Cyber crime
Tesla and Jenkins Servers Fall Victim to Cryptominers

Vulnerable enterprise servers are being compromised by individuals or groups looking for resources to mine cryptocurrency. The latest victims are automobile-maker Tesla and users of Jenkins servers.

Read Article
Malware
New AndroRAT Exploits Allow for Permanent Rooting

A new variant of Android Remote Access Tool can inject root exploits to perform malicious tasks such as silent installation, shell command execution, WiFi password collection, and more. It targets CVE-2015-1805, a vulnerability disclosed in 2016.

Read Article
Exploits & Zero-DaysTargeted attacks
North Korean Hackers Allegedly Exploit Adobe Flash Player Vulnerability (CVE-2018-4878) Against South Korean Targets

In a security alert posted on its website on January 31, The South Korean Computer Emergency Response Team (KR-CERT) warned of a zero-day vulnerability in Adobe Flash player that could be maliciously exploited.

Read Article