Media Coverage

Russian developer, Alexey Khripkov, said he'd shared his mining code with other developers, which could explain the number of apps containing code referencing his oxothuk nickname that have also been called out by anti-virus firms such as Trend Micro in recent weeks.

“There are many hurdles for businesses to overcome in establishing GDPR compliance – trying to demystify what ‘State of the Art’ means is but another challenge on the list,” said Bharat Mistry, principal security strategist for Trend Micro.

Vice President of Cloud Research at Trend Micro, Mark Nunnikhoven, has a simple guide on how to secure an Amazon S3 buckets.

Content promotion services have been in the "gray market" for a while, but fake news didn't start to gain widespread attention until the 2016 US Presidential election, explains Vladimir Kropotov, senior researcher for Trend Micro's Forward-Looking Threat Research (FTR).

The vulnerabilities were reported to the vendor by Steven Seeley of Offensive Security through Trend Micro’s Zero Day Initiative (ZDI).

The AP validated the list by running it against a sample of phishing emails obtained from people targeted and comparing it to similar rosters gathered independently by other cybersecurity companies, such as Tokyo-based Trend Micro and the Slovakian firm ESET.

The longest exploit chain in the history of the Pwn2Own competition was demonstrated at the Mobile Pwn2Own 2017 event in Tokyo, with security researchers using 11 different bugs to get code execution on a Samsung Galaxy S8.

"The phone connects to a Wi-Fi network and a malicious app is installed. Sensitive information can be exfiltrated from the targeted device," said a spokeperson from Trend Micro.

Trend Micro recently detected malicious apps in the Google Play store that use JavaScript loading and native code injection to avoid being detected.

The latest examples came on Monday with the revelation from antivirus provider Trend Micro that at least two Android apps with as many as 50,000 downloads from Google Play were recently caught putting crypto miners inside a hidden browser window.

There’s no doubt that organizations are under greater threat today from cyberspace than they’ve ever been – Trend Micro alone blocked over 38 billion threats in the first half of 2017.

From a security standpoint, smart lock technologies pose more of a physical challenge than a technology challenge, suggested William Malik, vice president for infrastructure strategies at Trend Micro.

“Based on our initial analysis, Bad Rabbit spreads to other computers in the network by dropping copies of itself in the network using its original name and executing the dropped copies using Windows Management Instrumentation (WMI) and Service Control Manager Remote Protocol. When the Service Control Manager Remote Protocol is used, it uses dictionary attacks for the credentials,” Trend Micro researchers shared.

A September 2017 survey conducted by cyber-security solutions provider Trend Micro, in conjunction with Opinium, found that most executives are not adequately prepared for GDPR, and the fallout could be significant.

“While many ransomware families like Cerber, SLocker and Locky are increasingly pinpointing their targets, they’re still distributed globally,” said Trend Micro researchers.

Trend Micro previously attributed other incidents that attacked this vulnerability, which was patched on October 16, to the BlackOasis APT group.

Research by Trend Micro found that 73% of 1000 IT decision makers were unaware of the extent of fines that could be levied for GDPR non-compliance

“Serverless is that last step on the current line of going ‘I don’t have to run any of this stuff — I can just write code that’s directly tied to my business,'” said Mark Nunnikhoven, vice president of cloud research at Trend Micro.

"How it works is technically complex," said William Malik, vice president for infrastructure strategies at Trend Micro. "The easy answer is the attacker gets the access point to rebroadcast part of the initial handshake, analyzes that information, and then the attacker can intercept the rest of the conversation," he told TechNewsWorld.

Connecting everyday devices to the Internet seems like a great idea, but users need to be mindful of the risks, warned JD Sherry, vice president of technology and solutions at Tokyo-based antivirus-software maker Trend Micro.

Analysts at Trend Micro, a cybersecurity firm, in 2014 discovered that copies of Football Manager Handheld, a smartphone game, and TuneIn Radio, an audio app, contained malicious software that mined cryptocurrencies, the proceeds of which were probably funneled to the developers.

When it comes to the Middle Eastern and North African underground, research from Trend Micro showed that the regional cybercrime marketplace has a few unique hallmarks, including a “spirit of sharing” mindset that hinges on a feeling of brotherhood and religious alliance that transcends the illicit transactions that occur.

TrendMicro researchers said the low price point reflected a unique aspect of brotherhood and comradery unlike what is seen other market places where the players only aim to make money.

Bottom Line: In addition to effective malware protection, Trend Micro Antivirus+ Security offers layered protection against ransomware, spam filtering, and a firewall booster.

The Health Information Trust Alliance (HITRUST) and Trend Micro have created a deception-based threat detection collaboration platform that deploys “honeypots” across the healthcare ecosystem.

In July, Trend Micro and VMware announced a new partnership to tackle enterprise mobile security issues. The companies plan to create new solutions which will automatically detect and tackle mobile threats on corporate networks.

The technical excellence of the Russian hacking groups, whether or not affiliated to the FSB, escapes no-one: as long ago as September 2012, Trend Micro warned in the report Peter the Great vs. Sun Tzu, “East Asian hackers are not at the same skill level of maturity as their East European counterparts.”

A Trend Micro mid-year report recently revealed that the firm blocked 82 million ransomware threats in the first six months of 2017, as well as 3000 Business Email Compromise attempts.

In its latest cyber threat report, Trend Micro’s researchers highlight the growing number of network-based attacks targeting ATMs.

Now, more than 1,200 apps available in third-party marketplaces are exploiting Dirty Cow as part of a scam that uses text-based payment services to make fraudulent charges to the phone owner, researchers from antivirus provider Trend Micro reported on Monday.

“Use of cryptocurrency miners is on the rise in the world of cybercrime,” Trend Micro Vice President of Cloud Security Mark Nunnikhoven told SC Media. “We haven't yet seen them coupled with ransomware, but that combination is one that's likely to surface.”

In most of the newly observed attacks, Locky has been distributed alongside another ransomware family calked FakeGlobe, also known as Globe Imposter, Trend Micro says.

According to Trend Micro Inc., FakeGlobe is a form of ransomware that encrypts different files to that of Locky, meaning that potentially victims could be forced to pay up for both infections.

BEC attacks generated $5.3 billion in global losses between 2013 and 2017, Trend Micro researchers reported earlier this year.

Uncovered by cyber security researchers at Trend Micro, the nature of the campaign means it's possible for victims infected by one form of ransomware to still be vulnerable to a further attack from the next one in the rotation.

These consumers could be at greater risk of identity theft because “the more data an attacker has, the harder it is to stop them,” said Mark Nunnikhoven, a vice president with Internet security company Trend Micro.

“There’s no simple fix,” says Mark Nunnikhoven, vice president of cloud-computing research at Trend Micro. “This kind of internal network was never meant to be connected the way it is now.”

A recently malware attack has been leveraging the Hangul Word Processor (HWP) word processing application and its ability to run PostScript code, Trend Micro reveals.

"Government regulation is the only way this is going to happen," William Malik, vice president of infrastructure strategies at Trend Micro said on the panel. "Automobiles didn't get safer until the government regulated them."

The first half of the year saw a continued surge in ransomware, Business Email Compromise (BEC) and other threats, with Trend Micro blocking over 38 billion during the period, it claimed in a new report.

All that information packaged together sells for upwards of $30 per identity on online black markets, according to Mark Nunnikhoven, head of cloud research for cybersecurity firm Trend Micro.

Trend Micro researchers first spotted the banking malware using network sniffing to steal data back in 2014 and recently spotted an increase in activity in August 2017 coming from new variants that all had the potential to unleash different types of payloads

The mobile edition of the Pwn2Own hacking contest is returning for its sixth year, with a prize pool of $500,000 and new targets for security researchers. Pwn2Own is operated by Trend Micro's Zero Day Initiative (ZDI) and has both desktop and mobile events.

Cloud-based online storage service Autodesk A360 Drive has been recently abused as a malware delivery platform, according to Trend Micro.

A trojan spreading fileless malware, which Trend Micro detects as “TROJ_ANDROM.SVN,” conceals itself within two malicious files on an infected USB.

The trend in medical devices connected to the internet has opened the door to hackers being able to threaten victim's lives, Ed Cabrera, chief cybersecurity officer at the threat research firm Trend Micro, tells Wired.

Despite the move toward EMV chip cards, point-of-sale (POS) malware continues to vex merchants’ payment systems, most recently with the discovery of MajikPOS malware in North America, which TrendMicro reported on in March.

Trend Micro this week said that it will offer over $500,000 in cash prizes at Zero Day Initiative’s Mobile Pwn2Own contest, set to take place Nov. 1-2, during the PacSec 2017 Conference in Tokyo, Japan.

The trojan looks very similar to the GhostClicker malware previously analyzed by Trend Micro before its authors decided to use it to launch DDoS attacks.

According to Trend Micro, the mining malware operation includes a timer that automatically triggers the malicious WMI script every three hours.