
TrendAI™
保安網誌

精選網誌

TrendAI™ Research Helps Disrupt Botnet of More Than 1.3 Million Pre-Infected Set-Top Boxes
TrendAI™ Research supplied intelligence over several months that helped disrupt a botnet of more than 1.3 million pre-infected set-top boxes. We look at how the operation worked, its impact, and what the disruption means for defenders.
Brotli Flaw Behind 'Node2Shell': What to Patch and Where It Hides
Two Critical PHP Flaws Leaked Before the Patch: What Organizations Should Do Now
On 20 October at 15:20 UTC, a Hacker News post leaked details of two critical PHP vulnerabilities that could allow remote code execution. The post was removed, but screenshots circulated on X and Mastodon.
搜尋研究文章
Filter by:
Undertaking Security Challenges in Hybrid Cloud Environments
As organizations make their move toward a more efficient and innovative future in the cloud, hybrid cloud environments pose several problems that can make or break their overall strategies.
“Twin Flower” Campaign Jacks Up Network Traffic, Downloads Files, Steals Data
Researchers detected the “Twin Flower” campaign that simulates increased clicks to boost network traffic, boosting SEO ranking and advertising revenue.
Threat Actors Deliver Courier-Themed Spam Campaign with Attached ACE Files
Trend Micro researchers detected a new courier service themed malicious spam campaign that uses ACE files as attachments.
Misconfigured Docker Daemon API Ports Attacked for Kinsing Malware Campaign
A campaign targeted misconfigured Docker Daemon API ports through Kinsing malware.
Analysis: Suspicious “Very Hidden” Formula on Excel 4.0 Macro Sheet
Cybercriminals exploit a feature in Excel that allows users to hide sheets by hiding obfuscated suspicious formulas in a “Very Hidden” sheet.
Investigation into a Nefilim Attack Shows Signs of Lateral Movement, Possible Data Exfiltration
Trend Micro’s Managed XDR (MxDR) and Incident Response (IR) teams recently investigated an incident involving a company that was hit by the Nefilim ransomware.
Threat Actors Abuse Evernote, Other Shared Platforms for Credential Phishing
Threat actors use Evernote and other platforms such as Canva, Lucidpress, and Infogram as host pages for credential phishing.
Malicious Domains and Files Related to Zoom Increase, ‘Zoom Bombing’ on the Rise
Users of video conferencing app Zoom have been targeted using suspicious domains, malicious files, and ‘Zoom bombing’ as threat actors take advantage of work-from-home arrangements brought about by COVID-19.
Russian Investigators Bust Credit Card Fraud Ring
At least 25 people allegedly including a kingpin were arrested for card fraud by Russian federal investigators.
Working From Home? Here’s What You Need for a Secure Setup
There has been an influx of employees signing in remotely to corporate networks and using cloud-based applications. But this shift could also open doors to security risks. Where should security fit in?