Research, News, and Perspectives

Malware

Python-Based NodeStealer Version Targets Facebook Ads Manager

In this blog entry, Trend Micro’s Managed XDR team discuss their investigation into how the latest variant of NodeStealer is delivered through spear-phishing attacks, potentially leading to malware execution, data theft, and the exfiltration of sensitive information via Telegram.

Research Dec 19, 2024

Save to Folio

Research Dec 19, 2024

Save to Folio

Artificial Intelligence (AI)

Link Trap: GenAI Prompt Injection Attack

Prompt injection exploits vulnerabilities in generative AI to manipulate its behavior, even without extensive permissions. This attack can expose sensitive data, making awareness and preventive measures essential. Learn how it works and how to stay protected.

Security Strategies Dec 17, 2024

Save to Folio

Security Strategies Dec 17, 2024

Save to Folio

APT & Targeted Attacks

Earth Koshchei Coopts Red Team Tools in Complex RDP Attacks

APT group Earth Koshchei, suspected to be sponsored by the SVR, executed a large-scale rogue RDP campaign using spear-phishing emails, red team tools, and sophisticated anonymization techniques to target high-profile sectors.

Latest News Dec 17, 2024

Save to Folio

Latest News Dec 17, 2024

Save to Folio

Cyber Threats

Vishing via Microsoft Teams Facilitates DarkGate Malware Intrusion

In this blog entry, we discuss a social engineering attack that tricked the victim into installing a remote access tool, triggering DarkGate malware activities and an attempted C&C connection.

Latest News Dec 13, 2024

Save to Folio

Latest News Dec 13, 2024

Save to Folio

Cyber Threats

INTERPOL & Trend's Fight Against Cybercrime

Trend threat intelligence and training were crucial to the success of two major policing operations in 2024

Latest News Dec 12, 2024

Save to Folio

Latest News Dec 12, 2024

Save to Folio

MITRE ATT&CK 2024 Results for Enterprise Security

Enterprise 2024 will incorporate multiple, smaller emulations for a more nuanced and targeted evaluation of defensive capabilities. We’re excited to offer two distinct adversary focus areas: Ransomware targeting Windows and Linux, and the Democratic People's Republic of Korea's targeting macOS.

Reports Dec 09, 2024

Save to Folio

Reports Dec 09, 2024

Save to Folio

Cyber Threats

MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur’s Multi-Platform Attacks

Trend Micro’s monitoring of the MOONSHINE exploit kit revealed how it’s used by the threat actor Earth Minotaur to exploit Android messaging app vulnerabilities and install the DarkNimbus backdoor for surveillance.

Dec 05, 2024

Save to Folio

Dec 05, 2024

Save to Folio

Artificial Intelligence (AI)

The Road to Agentic AI: Exposed Foundations

Our research into Retrieval Augmented Generation (RAG) systems uncovered at least 80 unprotected servers. We highlight this problem, which can lead to potential data loss and unauthorized access.

Research Dec 04, 2024

Save to Folio

Research Dec 04, 2024

Save to Folio

Malware

Gafgyt Malware Broadens Its Scope in Recent Attacks

Our researchers identified threat actors exploiting misconfigured Docker servers to spread the Gafgyt malware. This threat traditionally targets IoT devices; this new tactic signals a change in its behavior.

Research Dec 03, 2024

Save to Folio

Research Dec 03, 2024

Save to Folio

Compliance & Risks

World Tour Survey: IT Operations’ Hands-on Defense

Trend surveyed 750 cybersecurity professionals in 49 countries to learn more about the state of cybersecurity, from job pressures to the need for more advanced tools. Explore what IT operations teams had to say.

Research Dec 02, 2024

Save to Folio

Research Dec 02, 2024

Save to Folio