Skip to main content

TrendAI™
保安網誌

TrendAI Security 網誌

精選網誌

Cyber crime
3 Indonesian Hackers Arrested for Global Magecart Attacks, Other Members Still at Large

The Interpol, together with the Indonesian National Police, announced the arrest of three Indonesian men suspected of being behind Magecart attacks.

Read Article
Cyber crime
Google, Mozilla Crack Down on Malicious Extensions and Add-ons

Google indefinitely suspends extensions that use the Chrome Web Store payments while Mozilla bans 197 add-ons in a quest to halt fraudulent activities.

Read Article
Software supply chain
Unsecured AWS S3 Bucket Found Leaking Data of Over 30K Cannabis Dispensary Customers

An unsecured Amazon S3 bucket was found leaking the data of more than 30,000 individuals. It was discovered to have exposed 85,000 files that included records with sensitive personally identifiable information (PII).

Read Article
Phishing & BEC
NetWire RAT Hidden in IMG Files Deployed in BEC Campaign

A recent BEC campaign targets organizations by sending them emails with IMG (disk imaging) file attachments hiding a NetWire remote access trojan.

Read Article
Cyber crime
Sextortion Scheme Claims Use of Home Cameras, Demands Bitcoin or Gift Card Payment

A new sextortion scheme threatens to expose nude videos supposedly captured via victims' mobile phones and home cameras.

Read Article
IoT & smart devices
Hacker Publishes Credentials for Over 515,000 Servers, Routers, and IoT Devices

A hacker published a massive list of Telnet usernames and passwords for more than 515,000 servers, routers, and IoT devices.

Read Article
Exploits & Zero-Days
Microsoft Releases Advisory on Zero-Day Vulnerability CVE-2020-0674, Workaround Provided

On January 17, Microsoft published an advisory (ADV200001) warning users about CVE-2020-0674, a remote code execution (RCE) vulnerability involving Microsoft’s Internet Explorer (IE) web browser.

Read Article
Exploits & Zero-Days
Blocking A CurveBall: PoCs Out for Critical Microsoft-NSA Bug CVE-2020-0601

Security researchers have released PoCs for critical vulnerability CurveBall (CVE-2020-0601).

Read Article
Cyber crimeMalware
Mobile Banking Trojan FakeToken Resurfaces, Sends Offensive Messages Overseas from Victims’ Accounts

An updated version of mobile malware FakeToken was found sending massive numbers of offensive messages to foreign countries.

Read Article
Phishing & BEC
Texas School District Loses $2.3 Million to Phishing Scam, BEC

A Texas school district is investigating an email phishing attack after a series of transactions resulted in the loss of an estimated US$2.3 million.

Read Article