Media Coverage

According to a recent report issued by security researchers at Trend Micro, ATM malware has become a commodity and any criminal with $1,000 to invest can start attacking ATMs in no time.

A vulnerability allows any website to forcibly join a user to a Zoom call, with their video camera activated, without a user's permission. According to Trend Micro's Greg Young, having your camera and audio enabled on your Mac without your knowledge can create a number of scenarios with bad outcomes, including the use of the captured video or screenshots for blackmail.

The attacker behind the development of Anubis has been active for at least 12 years, and in order to stay current, has retooled the malware for use in fresh attack waves, according to Trend Micro researchers.

DevOps initiatives have become important for 74% of organizations over the past year, but communication must improve for DevOps to be successful, according to Trend Micro.

Cybersecurity experts from Trend Micro blocked five million attempted hacks of IoT cameras. Trend Micro teamed up with IP security solution provider VIVOTEK in a bid to secure IoT cameras. Data from 7,000 IP cameras were analysed by Trend Micro to find the scale of the threat against them, and how few protections they have.

The first day of the re:Inforce conference showed how AWS views security—as a fundamental part of building technology. Trend Micro's Mark Nunnikhoven took away three repeated themes: Security is a key business concern, automation is key part of modern security, and security must be built into the fabric of everything.

Trend Micro researchers discovered a cryptocurrency mining botnet that uses the Android Debug Bridge (ADB) Wi-Fi interface and SSH connections to hosts stored in the known_hosts list to spread to other devices.

Trend Micro announced it has blocked 5 million attempted cyberattacks against IP cameras in just five months. Through its strategic partnership with VIVOTEK, a global leading IP security solution provider, Trend Micro’s IoT security solutions are embedded in globally deployed IP cameras to provide superior protection.

According to researchers at Trend Micro, criminals have been using hacking tools that were reportedly stolen from the National Security Agency in targeting companies around the world as part of a cryptomining campaign since March.

SmarTone Japanese operator NTT Docomo will launch a service designed to protect IoT devices running on its mobile network using Trend Micro’s security platform. Protection will be enabled by the Docomo Cloud Platform Network Security Service. The security shield will mainly target Docomo’s customers who are building infrastructure-as-a-service environments.

Trend Micro has confirmed that attackers have been exploiting a vulnerability in the Oracle WebLogic server to install monero (XMR) mining malware, while using certificate files as an obfuscation trick.

Trend Micro published its findings on a new malware, dubbed BlackSquid, which has proven itself to be especially dangerous. The malware has emerged from the depths to attack web servers with a barrage of exploits designed to land illicit cryptocurrency miners.

Trend Micro's Bill Malik tells TechRadar about some of the most pressing IoT threats, including phishing and business email compromise attacks as well as ransomware.

Real estate insurance company First American Financial Corp exposed nearly 885 million sensitive customer documents dating back up to 16 years on a publicly available web page. Trend Micro's Mark Nunnikhoven comments that BEC is a rising issue in the real estate market and is starting to target realtors. An attacker can apply a sense of urgency when posing as a realtor and try to fool a buyer into sending money to a fake account, or vice versa.

Trend Micro is extending the reach of its container security offerings to now address the full range of the DevSecOps life cycle. The latest updates to Trend Micro Deep Security add the ability to inspect all lateral and horizontal traffic movement between containers and platform layers such as Kubernetes and Docker.

Security researchers from Trend Micro said they had recently discovered a new variant of Trickbot arriving via redirection URL in a spam mail message. The URL appears to point toward a Google domain but instead redirects users who click on it to a site that downloads Trickbot on the user's system.

Microsoft released a patch for an elevation-of-privileges vulnerability being exploited in the wild. It’s tied to the Windows Error Reporting feature and is being abused by attackers who have gained local access to affected PCs. According to Trend Micro's Zero Day Initiative, they would need to first gain access to run code on a target system, but malware often uses elevations like this one to go from ‘user’ to ‘admin’ code execution.

Trend Micro's Greg Young shares how complex IoT environments (CIEs) offer new opportunities for hackers to launch physical and digital attacks. That’s bad news for IT professionals as it means a further expansion of the corporate attack surface.

Cybersecurity researchers at Trend Microhave detailed a new means of the Dharma family of ransomware being deployed: by bundling it inside a fake anti-virus software installation.

Trend Micro says that a key vulnerability in smart homes is the control systems and automation platforms used to coordinate all our smart devices. The increasing complexity with each additional device and automation rule also means an expanding attack surface.

Trend Micro found that the radio signals crane controllers use are not encrypted over the air in any way, and can be easily intercepted and spoofed using off-the-shelf equipment and a basic knowledge of electronics and radio engineering.

Trend Micro discovered that a hacking group, nicknamed Mirrorthief, relied on the scripting technique to steal card data from 201 online campus stores across the US and Canada on April 14th. The team slipped its scripts into the checkout pages of the sites (all created by a common developer, PrismRBS) to harvest full card details, names, addresses and phone numbers.

Trend Micro comments that the delineation between pure web defacement and cybercriminal or cyberespionage activity is disappearing. If this continues and escalates, then the line between defacers, hacktivists and cybercriminals will become even more blurred.

Trend Micro is now making it possible to employ Kubernetes to orchestrate security scans of container images conducted by Trend Micro Deep Security, its suite of of tools that rely on deep packet inspection to protect applications using a combination of firewalls, intrusion protection systems and monitoring of logs and files.

Manufacturing networks still running outdated technology could risk their intellectual property and production processes. The Trend Micro report, Securing Smart Factories: Threats to Manufacturing Environments in the Era of Industry 4.0, outlines the security dimension of a new era for manufacturing driven by IoT and connectivity everywhere.