
TrendAI™
Blog de Segurança

Blogs em Destaque

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
Pesquisar por artigos de pesquisa
Filter by:
Group Behind TrickBot Spreads Fileless BazarBackdoor
A campaign propagates a new malware named ‘BazarBackdoor’, a fileless backdoor reportedly created by the same threat actors behind TrickBot.
Guidance on Kubernetes Threat Modeling
We provide recommendations for cloud admins on how to formulate a security strategy when using Kubernetes for container orchestration.
Know the Symptoms: Protect Your Devices While Working From Home
Is your work-from-home set up secure? Here are a few signs to know if your devices have been hacked or infected with malware.
Loki Delivered as CAB File Attachment
A variant of Loki info stealer that we detected through our honeypot is propagated as Windows CAB file email attachments. It uses process hollowing to evade detection.
Australian Health Insurance-Themed Spam Spreads Ursnif
A spam campaign that spreads the Ursnif spyware has attachments named after an Australian insurance provider.
Exposed Redis Instances Abused for Remote Code Execution, Cryptocurrency Mining
Recently, we wrote an article about more than 8,000 unsecured Redis instances found in the cloud. In this article, we expound on how these instances can be abused to perform remote code execution (RCE), as demonstrated by malware samples captured in the wild.
Maze Ransomware Attacks US IT Firm
Maze ransomware, notorious for not just encrypting but for stealing victims’ data, attacks a US IT firm. The company sent emails to customers which include IP addresses and file hashes that have been linked to previous Maze attacks.
Nemty Ransomware Ceases Public Operations, Focuses on Private Schemes
Cybercriminals behind Nemty ransomware close down their Ransomware-as-a-Service (RaaS) operation as they zero in on private schemes. This is confirmed through a post in a Russian hacker forum.
Fake Messaging App Installers Promoted on Fraudulent Download Sites, Target Russian Users
Fake installers of popular messaging apps such as Viber and WhatsApp are propagated via fraudulent Russian websites. The installers are believed to be adware.
How to Secure Video Conferencing Apps
Video conferencing apps provide many benefits, but they also present organizations with the challenge of ensuring that their employees — and the data they work with — remain secure when using these apps.