Media Coverage

A new piece of malware called Poweliks can seize control of a Windows computer — and it can't be detected by antivirus programs. That's because it doesn't download any files to the infected computer; instead, it resides as encrypted text in the computer's registry. From there it can seize control of the computer's processes to do things such as download more malware onto the computer.

A new malware program called Poweliks attempts to evade detection and analysis by running entirely from the system registry without creating files on disk, security researchers warn.

Cybersecurity event brings together an army of infosec nerds with a focus on threats, vulnerabilities, and innovative defenses.

Attacks on Gizmodo's Brazilian site and the website of an unnamed logistics firm hosted by the same ISP have prompted Trend Micro to investigate whether “a vulnerability was used in order to penetrate the web servers,” according to a company blog post.

While law enforcement won an important battle against cyber crime by taking down the Gameover Zeus botnet and hampering the threat of CryptoLocker malware, that hasn't stopped persistent and innovative criminals from producing variants on file-encryption malware like the recently detected Cryptoblocker, according to Trend Micro.

Trend Micro’s one-time password (OTP)-based two-factor authentication bypass report (PDF) is hardly news to those in the tech world, but it is well-packaged and even branded with a weird name - Operation Emmental (also known as Swiss cheese) - how media-ready!

Cloud-based antivirus vendor Webroot is investing in joint marketing and seminars, white papers, training and support to grow its base of resellers in North America and attract managed service providers with a newly released console.

What the Goodwill breach illustrates -- and why old hacker tricks continue to work -- is the inadequacy of payment system standards. "Almost all major retail and credit card breaches occurred where a vendor or merchant was actually in PCI-DSS compliance," said Vijay Basani, CEO of EiQ Networks. "Regulations in general incentivize merchants to do just enough to pass a security audit."

The CAN SPAM Act is now 11 years old and as good as it has been, the Act needs to be updated to address the realities of modern marketing.

BlackBerry has always touted its mobile devices as secure. But now it plans to make them “more secure” by acquiring a German company that specializes in voice encryption.

Malware tied to the Operation Emmental attacks that have plagued bank customers in Switzerland and three other nations first surfaced in 2013. But variants of the malicious code only recently gained the ability to bypass SMS-based two-factor authentication systems, says security vendor Trend Micro.

When you go online to bank, you probably assume the site – along with your transaction – is secure. However, a new report shows that your banking experience could be more vulnerable than you think.

The threat report from Japanese security company Trend Micro was blunt. Two-factor authentication was successfully compromised by criminals and the victims were customers of 34 different financial institutions in Japan, Switzerland, Austria and Sweden.

Rules designed to thwart man-in-the-middle attacks; could mean extra work for IT shops

Law enforcement authorities announced the indictment of six people in connection with a cybercrime operation that defrauded users of the StubHub ticketing service.

Cybercriminals are sneaking past security protections to access online accounts across 34 banks in Switzerland, Sweden, Austria and Japan. And in doing so, experts say, the hackers are defeating what’s often touted as one of the more effective online security protocols.

More than 30 banks have been targeted by a cyberattack designed to steal funds from customers’ accounts.

Be very careful which MH17 news stories you click on, especially on Facebook and Twitter, where scammers are exploiting the tragedy to spam you.

At last week’s Microsoft’s Worldwide Partner Conference (WPC), I had coffee with J.D. Sherry, Vice President, Technology and Solutions, Trend Micro. It was a chance to rediscover Trend Micro and thus reintroduce it to the SMB Nation community.

Assisting law enforcement, Trend Micro says 34 banks targeted in Operation Emmental

Operation Emmental Shreds Bank Defenses

2FA Systems Used by Banks Bypassed with Malware, Rogue Mobile Apps

So far, criminals have targeted users in Switzerland, Austria, Sweden, and Japan, Trend Micro revealed. The group, believed to be located in a Russian-speaking country, was also linked to attacks dating back to 2011 – though, at that time, saboteurs were spreading “off-the-shelf” banking malware, like SpyEye, Sancho wrote.

Assisting law enforcement, Trend Micro says 34 banks targeted in Operation Emmental

Researchers at the computer security company Trend Micro have named a new attack on online banking Emmental. Why? Like the Swiss cheese, the researchers said, online banking protections may be “full of holes.”