Media Coverage

A new piece of malware called Poweliks can seize control of a Windows computer — and it can't be detected by antivirus programs. That's because it doesn't download any files to the infected computer; instead, it resides as encrypted text in the computer's registry. From there it can seize control of the computer's processes to do things such as download more malware onto the computer.

A new malware program called Poweliks attempts to evade detection and analysis by running entirely from the system registry without creating files on disk, security researchers warn.

Cybersecurity event brings together an army of infosec nerds with a focus on threats, vulnerabilities, and innovative defenses.

Attacks on Gizmodo's Brazilian site and the website of an unnamed logistics firm hosted by the same ISP have prompted Trend Micro to investigate whether “a vulnerability was used in order to penetrate the web servers,” according to a company blog post.

While law enforcement won an important battle against cyber crime by taking down the Gameover Zeus botnet and hampering the threat of CryptoLocker malware, that hasn't stopped persistent and innovative criminals from producing variants on file-encryption malware like the recently detected Cryptoblocker, according to Trend Micro.

Trend Micro’s one-time password (OTP)-based two-factor authentication bypass report (PDF) is hardly news to those in the tech world, but it is well-packaged and even branded with a weird name - Operation Emmental (also known as Swiss cheese) - how media-ready!

Cloud-based antivirus vendor Webroot is investing in joint marketing and seminars, white papers, training and support to grow its base of resellers in North America and attract managed service providers with a newly released console.

What the Goodwill breach illustrates -- and why old hacker tricks continue to work -- is the inadequacy of payment system standards. "Almost all major retail and credit card breaches occurred where a vendor or merchant was actually in PCI-DSS compliance," said Vijay Basani, CEO of EiQ Networks. "Regulations in general incentivize merchants to do just enough to pass a security audit."

The CAN SPAM Act is now 11 years old and as good as it has been, the Act needs to be updated to address the realities of modern marketing.

BlackBerry has always touted its mobile devices as secure. But now it plans to make them “more secure” by acquiring a German company that specializes in voice encryption.

Malware tied to the Operation Emmental attacks that have plagued bank customers in Switzerland and three other nations first surfaced in 2013. But variants of the malicious code only recently gained the ability to bypass SMS-based two-factor authentication systems, says security vendor Trend Micro.

When you go online to bank, you probably assume the site – along with your transaction – is secure. However, a new report shows that your banking experience could be more vulnerable than you think.

The threat report from Japanese security company Trend Micro was blunt. Two-factor authentication was successfully compromised by criminals and the victims were customers of 34 different financial institutions in Japan, Switzerland, Austria and Sweden.

Rules designed to thwart man-in-the-middle attacks; could mean extra work for IT shops

Law enforcement authorities announced the indictment of six people in connection with a cybercrime operation that defrauded users of the StubHub ticketing service.

Cybercriminals are sneaking past security protections to access online accounts across 34 banks in Switzerland, Sweden, Austria and Japan. And in doing so, experts say, the hackers are defeating what’s often touted as one of the more effective online security protocols.

More than 30 banks have been targeted by a cyberattack designed to steal funds from customers’ accounts.

Be very careful which MH17 news stories you click on, especially on Facebook and Twitter, where scammers are exploiting the tragedy to spam you.

At last week’s Microsoft’s Worldwide Partner Conference (WPC), I had coffee with J.D. Sherry, Vice President, Technology and Solutions, Trend Micro. It was a chance to rediscover Trend Micro and thus reintroduce it to the SMB Nation community.

Assisting law enforcement, Trend Micro says 34 banks targeted in Operation Emmental

Operation Emmental Shreds Bank Defenses

2FA Systems Used by Banks Bypassed with Malware, Rogue Mobile Apps

So far, criminals have targeted users in Switzerland, Austria, Sweden, and Japan, Trend Micro revealed. The group, believed to be located in a Russian-speaking country, was also linked to attacks dating back to 2011 – though, at that time, saboteurs were spreading “off-the-shelf” banking malware, like SpyEye, Sancho wrote.

Assisting law enforcement, Trend Micro says 34 banks targeted in Operation Emmental

Researchers at the computer security company Trend Micro have named a new attack on online banking Emmental. Why? Like the Swiss cheese, the researchers said, online banking protections may be “full of holes.”

More than 30 financial institutions in six countries have been defrauded by sophisticated criminal software that convinces bank customers to install rogue smartphone programs, a major security company reported on Tuesday.

Online fraudsters have predictably jumped on the tragic downing of Malaysian flight MH17 to trick users to click on spammy and malicious Twitter links which could lead to malware infection, according to Trend Micro.

To combat the growing threat of online breaches, companies and governments are hiring executives whose main responsibility is to make sure data systems are secure.

MH17 related discussions are being hashjacked

Fake apps dressed up to look like official ones but actually designed to steal user data are increasingly targeting Android phone users, according to a study by Trend Micro.

Trend Micro finds hundreds of thousands of fake Android apps in trawl of online stores, forums

Fake apps dressed up to look like official ones but actually designed to steal user data are increasingly targeting Android phone users, according to a study by Trend Micro.

New features help protect against targeted attacks and data loss as organizations migrate to the cloud. By ChannelPro

At the Microsoft Worldwide Partner Conference (WPC), Trend Micro announced new security features for Microsoft Office 365 and Azure users.

Security architect Peter Benson is concerned New Zealand’s proposed data breach disclosure regime isn't strong enough.

The code has appeared in an underground forum, according to Denmark-based security company CSIS

In this week's On Point, we look at cloud infrastructure advances, plus new products that maximize security and a new global partner program.

Corporate networks are reliable and secure, so what’s the issue?

The top five ways to rob a credit union outlined here a year ago remain worrisome. But, ask the experts, and only one method of theft identified last year remains top of mind in 2014.

Shortly after the alert sounded at 9:10 p.m., Yahoo Japan Corp.’s risk team knew it had a problem. More than 20 million usernames and passwords belonging to its customers were being dumped into a file, primed to be stolen.

Phishing message claims to provide links to leaked iPhone 6 information and pictures.

Along with the incessant rumors about the impending release of the iPhone 6, if that is indeed what Apple is calling it, come the scams that inevitably ensue with a new product launch.

Banks worldwide have seen about 400 cases of a new malware that silently lurks on browsers until it sees that users are visiting banking websites, and then kicks into high gear to steal information, according to a Tokyo-based antivirus company.

Google's removal of search results in Europe is drawing accusations of press censorship, as stories from some of the continent's most prominent news outlets vanishes.

How pathetic is the security in many enterprises? Almost six years since the patch to stop it was issued, Conficker is still one of the most common threats.

IT vendors across the spectrum are adjusting their channel programs to be able to better manage solution provider programs on a truly global scale. Case in point is Trend Micro, which late last month announced a new global channel program. - See more at: http://www.channelinsider.com/blogs/security/trend-micros-takes-its-chan...

Trend Micro chief cybersecurity officer Tom Kellermann breaks down how to offset potential cyber threats.

Just weeks after it came across banking malware that abuses a Windows security feature, Trend Micro has spotted yet another banking malware dubbed EMOTET, which “sniffs” network activity to steal information. It looks at data sent over secured connections through its capability to hook to a range of network APIs to monitor network traffic.

Everything is moving to the cloud — even the exploits of cyber criminals.

There is yet another reason to be wary of spam email about bank transfers or invoices—it could be carrying a new, cleverly designed malware program that steals financial information.