Research, News, and Perspectives

Exploits & Vulnerabilities

CVE-2024-38112: Void Banshee Targets Windows Users Through Zombie Internet Explorer in Zero-Day Attacks

Our threat hunters discovered CVE-2024-38112, which was used as a zero-day by APT group Void Banshee, to access and execute files through the disabled Internet Explorer using MSHTML. We promptly identified and reported this zero-day vulnerability to Microsoft, and it has been patched.

Jul 15, 2024

Save to Folio

Jul 15, 2024

Save to Folio

Cyber Crime

An In-Depth Look at Crypto-Crime in 2023 Part 2

In 2023, the cryptocurrency industry faced a significant increase in illicit activities, including money laundering, fraud, and ransomware attacks. Ransomware attacks were especially prevalent and profitable for attackers. However, other forms of criminal activity also saw a rise.

Reports Jul 11, 2024

Save to Folio

Reports Jul 11, 2024

Save to Folio

Exploits & Vulnerabilities

Network detection & response: the SOC stress reliever

Cybersecurity teams are well-equipped to handle threats to technology assets that they manage. But with unmanaged devices providing ideal spots for attackers to lurk unseen, network detection and response capabilities have become vitally important.

Security Strategies Jul 09, 2024

Save to Folio

Security Strategies Jul 09, 2024

Save to Folio

Cyber Crime

An In-Depth Look at Crypto-Crime in 2023 Part 1

Cybersecurity is a growing concern in today's digital age, as more sensitive information is stored and transmitted online. With the rise of cryptocurrencies, there has also been a rise in crypto-crimes, which pose a significant threat to the security of both individuals and businesses.

Reports Jul 08, 2024

Save to Folio

Reports Jul 08, 2024

Save to Folio

Artificial Intelligence (AI)

The Top 10 AI Security Risks Every Business Should Know

With every week bringing news of another AI advance, it’s becoming increasingly important for organisations to understand the risks before adopting AI tools. This look at 10 key areas of concern identified by the Open Worldwide Application Security Project (OWASP) flags risks enterprises should keep in mind through the back half of the year.

Security Strategies Jul 08, 2024

Save to Folio

Security Strategies Jul 08, 2024

Save to Folio

Cyber Threats

Turning Jenkins Into a Cryptomining Machine From an Attacker's Perspective

In this blog entry, we will discuss how the Jenkins Script Console can be weaponized by attackers for cryptomining activity if not configured properly.

Research Jul 05, 2024

Save to Folio

Research Jul 05, 2024

Save to Folio

Cyber Threats

Mekotio Banking Trojan Threatens Financial Systems in Latin America

We’ve recently seen a surge in attacks involving the Mekotio banking trojan. In this blog entry, we'll provide an overview of the trojan and what it does.

Research Jul 04, 2024

Save to Folio

Research Jul 04, 2024

Save to Folio

Artificial Intelligence (AI)

AI Pulse: Siri Says Hi to OpenAI, Deepfake Olympics & more

AI Pulse is a new blog series from Trend Micro on the latest cybersecurity AI news. In this edition: Siri says hi to OpenAI, fraud hogs the AI cybercrime spotlight, and why the Paris Olympics could be a hotbed of deepfakery.

Latest News Jun 28, 2024

Save to Folio

Latest News Jun 28, 2024

Save to Folio

Exploits & Vulnerabilities

Examining Water Sigbin's Infection Routine Leading to an XMRig Cryptominer

We analyse the multi-stage loading technique used by Water Sigbin to deliver the PureCrypter loader and XMRIG crypto miner.

Research Jun 28, 2024

Save to Folio

Research Jun 28, 2024

Save to Folio

Cyber Crime

ICO Scams Leverage 2024 Olympics to Lure Victims, Use AI for Fake Sites

In this blog we uncover threat actors using the 2024 Olympics to lure victims into investing in an initial coin offering (ICO). Similar schemes have been found to use AI-generated images for their fake ICO websites.

Research Jun 27, 2024

Save to Folio

Research Jun 27, 2024

Save to Folio