Research, News, and Perspectives

Cyber Threats

Attacker Abuses Victim Resources to Reap Rewards from Titan Network

In this blog entry, we discuss how an attacker took advantage of the Atlassian Confluence vulnerability CVE-2023-22527 to connect servers to the Titan Network for cryptomining purposes.

Research Oct 30, 2024

Cyber Threats

Understanding the Initial Stages of Web Shell and VPN Threats: An MXDR Analysis

While cyberattacks that employ web shells and VPN compromise are not particularly novel, they are still prevalent. The recent incidents that Trend Micro MXDR analyzed highlight the importance of behavioral analysis and anomaly detection in security measures.

Research Oct 24, 2024

Cyber Threats

Unmasking Prometei: A Deep Dive Into Our MXDR Findings

How does Prometei insidiously operate in a compromised system? This Managed Extended Detection and Response investigation conducted with the help of Trend Vision One provides a comprehensive analysis of the inner workings of this botnet so users can stop the threat in its tracks before it inflicts damage to the system.

Research Oct 23, 2024

Cyber Threats

Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach

In this blog entry, we discuss how malicious actors are exploiting Docker remote API servers via gRPC/h2c to deploy the cryptominer SRBMiner to facilitate their mining of XRP on Docker hosts.

Attackers Target Exposed Docker Remote API Servers With perfctl Malware

We observed an unknown threat actor abusing exposed Docker remote API servers to deploy the perfctl malware.

Research Oct 21, 2024

Cloud

Gartner 2024 CNAPP Market Guide Insights for Leaders

As businesses increasingly pivot to cloud-native applications, the landscape of cybersecurity becomes ever more challenging.

Reports Oct 18, 2024

Artificial Intelligence (AI)

5 AI Security Takeaways featuring Forrester

Highlights from the recent discussion between Trend Micro’s David Roth, CRO Enterprise America, and guest speaker Jeff Pollard, VP, Principal Analyst, Forrester about AI hype versus reality and how to secure AI in the workplace.

Security Strategies Oct 17, 2024

Artificial Intelligence (AI)

How to Mitigate the Impact of Rogue AI Risks

This is the latest blog in an ongoing series on Rogue AI. Keep following for more technical guidance, case studies, and insights.

Expert Perspective Oct 17, 2024

Ransomware

Fake LockBit, Real Damage: Ransomware Samples Abuse AWS S3 to Steal Data

This article uncovers a Golang ransomware abusing AWS S3 for data theft, and masking as LockBit to further pressure victims. The discovery of hard-coded AWS credentials in these samples led to AWS account suspensions.

Research Oct 16, 2024

Cyber Threats

Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions

Trend Micro's Threat Hunting Team has observed EDRSilencer, a red team tool that threat actors are attempting to abuse for its ability to block EDR traffic and conceal malicious activity.

Research Oct 15, 2024

Research, News, and Perspectives

Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions

Attacker Abuses Victim Resources to Reap Rewards from Titan Network

Understanding the Initial Stages of Web Shell and VPN Threats: An MXDR Analysis

Unmasking Prometei: A Deep Dive Into Our MXDR Findings

Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach

Attackers Target Exposed Docker Remote API Servers With perfctl Malware

Gartner 2024 CNAPP Market Guide Insights for Leaders

5 AI Security Takeaways featuring Forrester

How to Mitigate the Impact of Rogue AI Risks

Fake LockBit, Real Damage: Ransomware Samples Abuse AWS S3 to Steal Data

Silent Threat: Red Team Tool EDRSilencer Disrupting Endpoint Security Solutions

Resources

Support

About Trend

Research, News, and Perspectives

Trending Topics

Resources

Support

About Trend

The Americas

Middle East & Africa

Europe

Asia & Pacific