Media Coverage

Generally, monitoring for cryptojacking attacks can be difficult, said Jon Clay, vice president of threat intelligence at Trend Micro. “One of the things we see a lot of is, they come in, they drop their miners, and then they wipe their tracks of everything they did prior to that. So it’s very difficult,” he said. “They also wipe out and turn off a lot of the security products that are running on these machines.”

A Trend Micro spokesperson shared a comment from the company's research team, which noted that based on currently available details, the issue could be related to a high volume of traffic from either a surge in popularity for DeepSeek's service or a targeted DDoS attack.

The incidents highlight that organizations are aiming to silence researchers, rather than engage publicly with them, says Dustin Childs, the head of threat awareness and the Zero Day Initiative at Trend Micro, which maintains a third-party bug bounty program.

Researchers at the this year's Pwn2Own Automotive hacking contest successfully hacked Tesla's wall connector electric vehicle (EV) charger.

Pwn2Own is a competitive hacking event with a long and noble history stretching back to 2007; that it attracts some of the best ethical hackers and security researchers on the planet is a testament to its reputation.

After the zero-day vulnerabilities are exploited and reported during Pwn2Own, vendors have 90 days to develop and release security patches before Trend Micro's Zero Day Initiative publicly discloses them.

$380,000 paid out on the first day of Pwn2Own Automotive 2025 for exploits targeting car infotainment units, operating systems, and chargers.

The gang's operator was banned from popular hacker forums Exploit and XSS, making it difficult for him to recruit new members, according to a Trend Micro report.

“Why do people drink one soda over another? Because the brand is so strong,” says Robert McArdle, a director on Trend Micro’s cybercrime research team at Trend Micro, which helped in the investigation. “And if you can destroy that you’re left with soda water.”

“The malicious repository containing the PoC appears to be a fork from the original creator,” Trend Micro said in its report. “In this case, the original Python files were replaced with the executable poc[dot]exe that was packed using UPX.”