Junestherry Dela Cruz
9 articles
-
BlogWeb Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack
Warlock continues to enhance its attack chain with new tactics to improve persistence, lateral movement, and defense evasion using an expanded toolset: TightVNC Yuze, and a persistent BYOVD technique leveraging the NSec driver.
March 16th, 2026 13 minMaristel Policarpio, Junestherry Dela Cruz, Sarah Pearl Camiling, Jacob Santos…
Read article -
BlogPureRAT Campaign Targets Job Seekers, Abuses Foxit PDF Reader for DLL Side-loading
Job seekers looking out for opportunities might instead find their personal devices compromised, as a PureRAT campaign propagated through email leverages Foxit PDF Reader for concealment and DLL side-loading for initial entry.
December 3rd, 2025 5 minSarah Pearl Camiling, Junestherry Dela Cruz, Jacob Santos, Sophia Nilette Robles…
Read article -
BlogIncrease in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics
In this blog entry, Trend™ Research analyses the layered command-and-control approaches that Lumma Stealer uses to maintain its ongoing operations while enhancing collection of victim-environment data.
November 13th, 2025 7 minJunestherry Dela Cruz, Sarah Pearl Camiling
Read article -
BlogAgenda 勒索軟體利用遠端管理工具和 BYOVD 技術，在 Windows 上執行 Linux 版本
Trend™ Research 發現了一起 Agenda 勒索病毒在 Windows 系統上植入 Linux 變種的精密攻擊，這種跨平台的執行方式，可能讓企業更加難以偵測。
October 23rd, 2025 13 minJacob Santos, Junestherry Dela Cruz, Sarah Pearl Camiling, Sophia Nilette Robles…
Read article -
Blog快速、廣泛、難以偵測：Vidar Stealer 2.0 資訊竊取程式做了哪些升級
TrendAI™ Research 研究了最新版的 Vidar 資訊竊取程式之後發現它包含以下幾項升級：使用 C 語言全部重寫、採用多執行緒架構，以及多項值得注意的強化功能。而新版本的發表時機似乎也意謂著 Vidar 正準備繼承 Lumma Stealer 沒落之後所騰出來的龍頭寶座。
October 21st, 2025 7 minJunestherry Dela Cruz
Read article -
BlogShifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing
A targeted underground doxxing campaign exposed alleged core members of Lumma Stealer (Water Kurita), resulting in a sharp decline in its activity and a migration of customers to rival infostealer platforms.
October 16th, 2025 5 minJunestherry Dela Cruz
Read article -
Blog揭開 Gentlemen 勒索病毒的面具：攻擊手法、技巧與程序曝光
本文分析 Gentlemen 勒索病毒集團在攻擊全球各地關鍵產業時所採用的適應性進階手法、技巧與程序。
September 9th, 2025 12 minJacob Santos, Maristel Policarpio, Don Ovid Ladores, Junestherry Dela Cruz
Read article -
BlogBack to Business: Lumma Stealer Returns with Stealthier Methods
Lumma Stealer has re-emerged shortly after its takedown. This time, the cybergroup behind this malware appears to be intent on employing more covert tactics while steadily expanding its reach. This article shares the latest methods used to propagate this threat.
July 22nd, 2025 9 minJunestherry Dela Cruz
Read article -
BlogTikTok Videos Promise Pirated Apps, Deliver Vidar and StealC Infostealers Instead
Trend™ Research uncovered a campaign on TikTok that uses videos to lure victims into downloading information stealers, a tactic that can be automated using AI tools.
May 21st, 2025 8 minJunestherry Dela Cruz
Read article