LODEINFO Since 2023 In the new campaign starting in early 2023, Earth Kasha expanded their targets into Japan, Taiwan, and India. Based on the bias of the incident amount, while…
Outlook and conclusions For years, mid-sized proxy botnets have existed without them being disrupted and published on. Examples are the botnets we associate with the Water Barghest and Water Zmeu…
Summary Trend Micro, in a joint study with Kagawa University, Kanagawa Prefectural Police Headquarters, Chiba Prefectural Police Headquarters, and Japan Cybercrime Control Center, investigated the relationships among multiple SEO malware…
Crowdoor will perform different actions based on the corresponding argument. In table 1, we summarize the behaviors exhibited by the new Crowdoor variant based on the arguments used. Overall, the…
Trend surveyed 750 cybersecurity professionals in 49 countries to learn more about the state of cybersecurity, from job pressures to the need for more advanced tools. Explore what SOC teams…
Source: In a 1980s sci-fi setting, a futuristic detective faces the challenge of identifying advanced cyborgs that are indistinguishable from humans. His mission to FIND these beings. Critics have warned…
Attacker Abuses Victim Resources to Reap Rewards from Titan Network | Trend Micro (US) Cyber Threats In this blog entry, we discuss how an attacker took advantage of the Atlassian…
In both incidents, a major pain point was the lack of application logs (i.e., VPN and IIS logs). These logs are crucial, as they help in understanding how the threat…
Identifying the Threat Group The threat actors behind Prometei remain largely unidentified, but evidence suggests they are Russian-speaking individuals. The name “Prometei,” derived from the Russian translation for Prometheus, hints…
Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach | Trend Micro (US) Cyber Threats In this blog entry, we discuss how malicious actors are exploiting Docker remote API…
Growth Setup