How attacks were observed in Trend Vision One Initial access Activity monitoring on Trend Vision One showed that a suspicious script retrieved from a suspicious URL was suddenly executed on…
Earth Preta Evolves its Attacks with New Malware and Strategies | Trend Micro (US) Malware In this blog entry, we discuss our analysis of Earth Preta’s enhancements in their attacks…
However, upon analyzing this sample, we found that the command and control (C&C) server was no longer active. Tracing the APIs used in malware and the recorded pcap file from…
Banking Trojans Mekotio Looks to Expand Targets, BBTok Abuses Utility Command | Trend Micro (US) Phishing Notorious Mekotio and BBTok are having a resurgence targeting Latin American users. Mekotio’s latest…
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion | Trend Micro (US) Malware While monitoring Earth Lusca, we discovered the threat group’s use of KTLVdoor, a highly obfuscated multiplatform backdoor,…
The term “Rogue AI” refers to artificial intelligence systems that act against the interests of their creators, users, or humanity in general. Rogue AI is a new risk that happens…
Fakeouts at the checkoutFraud continues to be front-and-center among the threat trends we’re tracking for AI Pulse. Even without technologies like agentic AI, scammers’ capabilities are advancing by leaps and…
Using the Interactsh project for beaconing purposes The malware leverages the Interactsh project for beaconing purposes. After each phase of the malware infection, it sends a DNS request to the…
Cryptojacking via CVE-2023-22527: Dissecting a Full-Scale Cryptomining Ecosystem | Trend Micro (US) Exploits & Vulnerabilities A technical analysis on how CVE-2023-22527 can be exploited by malicious actors for cryptojacking attacks…
In addition, email-based attacks will get progressively harder to detect due to generative AI (GenAI) which can allow an adversary to craft phishing and business email compromise (BEC) messages in…
Growth Setup