Skip to main content

TrendAI™
保安網誌

TrendAI Security 網誌

精選網誌

BotnetsIoT & smart devices
TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes

TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.

2026年11月2日 15 min
TrendAI™ Research
Read article
Exploits & Zero-Days
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
2026年10月28日 6 min
TrendAI™ Research
Read article
Two Critical PHP Flaws Leaked Before the Patch
Exploits & Zero-Days
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now

On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.

2026年10月22日
TrendAI™ Research
Read article

搜尋研究文章

IoT & smart devices
How to Secure Smart Home IoT Devices, Routers, and Smart Speakers

Smart TVs, smart refrigerators, smart cameras, and other smart devices make life at home convenient, but if left unguarded, they can inadvertently expose homes to risks. This infographic shows basic recommendations for securing these devices.

October 7th, 2021 1 min read TrendAI™ Research
Read Article
Targeted attacks
Zloader Campaigns at a Glance

Our infographic provides a quick and comprehensive overview of Zloader, which has been involved in numerous campaigns over the past few years.

September 29th, 2021 6 min read TrendAI™ Research
Read Article
Analyzing The ForcedEntry Zero-Click iPhone Exploit Used By Pegasus

Citizen Lab has released a report on a new iPhone threat dubbed ForcedEntry. This zero-click exploit seems to be able to circumvent Apple's BlastDoor security, and allow attackers access to a device without user interaction.

September 15th, 2021 5 min read Mickey Jin
Read Article
Phishing & BEC
APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs

We have continued tracking APT-C-36, also known as Blind Eagle, since our research on this threat actor in 2019. We share new findings of APT-C-36’s ongoing spam campaign targeting South American entities.

September 13th, 2021 6 min read Daniel Lunghi
Read Article
Malware
Analyzing SSL/TLS Certificates Used by Malware

We take a closer look at the SSL/TLS certificates used by malware.

September 3rd, 2021 4 min read Mohamad Mokbel
Read Article
Cryptocurrency
Fake Cryptocurrency Mining Apps Trick Victims Into Watching Ads, Paying for Subscription Service

We recently discovered eight deceptive mobile apps that masquerade as cryptocurrency cloud mining applications where users can earn cryptocurrency by investing money into a cloud-mining operation.

August 18th, 2021 6 min read Cifer Fang
Read Article
Chaos Ransomware: A Proof of Concept With Potentially Dangerous Applications

Since June 2021, we’ve been monitoring an in-development ransomware builder called Chaos, which is being offered for testing on an underground forum.

August 10th, 2021 4 min read Monte de Jesus, Don Ovid Ladores
Read Article
IoT Security Issues, Threats, and Defenses

As the IoT continues to influence more environments and settings, we review what IoT security is and why it remains essential today.

July 22nd, 2021 9 min read TrendAI™ Research
Read Article
Cyber threats
#NoFilter: Exposing the Tactics of Instagram Account Hackers

What tactics do Instagram account hackers use? What do these cybercriminals do with stolen accounts? How can users protect their accounts? We look into Instagram account hacking incidents from a security researcher’s perspective and share recommendations for users of Instagram and other social media platforms.

July 12th, 2021 9 min read Jindrich Karasek
Read Article
APTsCyber crime
BIOPASS RAT: New Malware Sniffs Victims via Live Streaming

We discovered a new malware that targets online gambling companies in China via a watering hole attack, in which visitors are tricked into downloading a malware loader disguised as a legitimate installer for well-known apps such as Adobe Flash Player or Microsoft Silverlight.

July 9th, 2021 15 min read Joseph C Chen, Kenney Lu, Jaromir Horejsi, Gloria Chen
Read Article