Media Coverage

JPMorgan Chase, two other banks see no sign of fraud from cyberattacks

Custom malware + lateral network moves = big problems for banking.

So many companies have been hacked in the past year that news of another major data breach has become almost routine.

Big Banks Say They Have No Indication They Were Victimized

Hackers have managed to break into 7 of the top 15 banks.

Tom Kellermann, chief cybersecurity officer at Trend Micro, and Bloomberg's Keri Geiger discuss the hack attack on JPMorgan Chase and at least four other banks this month. They speak with Trish Regan on "Street Smart."

A Chinese manufacturer's routers that contain a hardcoded password that can be used to open a 'backdoor' should be thrown away and replaced with more reputable gear, experts say

As more devices and appliances with Internet capabilities enter the market, protecting those devices from hackers becomes critical. Unfortunately, many of these non-computer, non-smartphone devices — from toilets to refrigerators to alarm systems — weren't built with security in mind.

Chinese hackers stole social security numbers, names and addresses from 4.5 million patients of Community Health Systems Inc., the second-biggest for-profit U.S. hospital chain, according to the company.

Chinese hackers stole 4.5 million patients’ names, Social Security numbers and other personal data from the computers of one of the country’s largest hospital chains, the company said Monday — the biggest reported cyberattack ever on a U.S. health care company.

PC enthusiasts dig the very fast solid-state drives that SanDisk builds, but the drives in the company’s Extreme Pro line can be pricey. The Ultra II series of SSDs that SanDisk announced today target mainstream users who focus on price first and performance second.

It wasn't too long ago that transfer speeds of 750 Mbps were considered high-end for wireless routers, but things have come a long way since then, regardless of the relatively short time. In fact, ASUS has just launched what may very well be the fastest router ever.

Like anything you do for your business, don't do it just to keep pace. Make it a determined decision that will either save you time, money or both.

All types of organizations are at risk of being targeted, but financial institutions top the list of the most at-risk businesses, Trend Micro found.

Cyber threats, data breaches and high-risk vulnerabilities continued to dominate the first half of 2014—but Trend Micro’s second quarter security roundup report shows that the severity of these attacks have intensified, especially against financial and banking institutions as well as retail outlets.

Tom Kellermann, chief cybersecurity officer at Trend Micro, discusses the ruling by a federal judge that the U.S. doesn’t have to disclose the telecommunications companies helping it collect phone call records or turn over a secret surveillance court’s orders. He speaks with Trish Regan on "Street Smart."

High energy, strong community, scary cybersecurity situation

Facebook plans to deploy PrivateCore technology into its server stack to bolster encryption and malware prevention, the social network said.

Hold Security has announced that more than 4.5 billion records were stolen from more than 420,000 web and FTP sites.

I grew up during the Cold War and, like most people at the time, was conditioned to fear the Soviet Union, which many people simply referred to as "Russia," even though it included several other Soviet republics..

"More cyber criminals are entering into the game at a quicker pace than quite honestly we can keep up with."

A gang of hackers in Russia has amassed 1.2 billion sets of looted user names and passwords, according to a U.S. data security company. Trend Micro Chief Cybersecurity Officer Tom Kellerman speaks on “In The Loop.”

A Russian gang stole an estimated 1.2 billion username/password combinations and, along the way, the criminals also amassed more than 500 million email addresses.

Last night’s New York Times scoop that a gang of criminal hackers deep in the Russian hinterlands had amassed more than 1 billion usernames and passwords linked to half-a-billion email addresses demonstrates both that the Web is increasingly dangerous for consumers and that Russia remains a safe zone for hacking networks, analysts told MC.

The biggest challenge for the gang of hackers in Russia said to have amassed 1.2 billion sets of user names and passwords, wasn’t actually stealing them. It’s putting that data to use.

New Report Finds Wide Variety of Businesses Are Vulnerable

A gang of Russian hackers have stolen 1.2 billion usernames and passwords, according to cybersecurity firm Hold Security. Amir Mizroch discusses what this means for Internet users.

Chinese authorities reportedly have warned Microsoft not to interfere with its investigation of allegations the company is engaging in anti-trust sales activities for its Windows and Office products in China. Microsoft has promised to comply.

Restaurant chain P.F. Chang China Bistro released details Monday about a data breach discovered in June where customer data may have been compromised and stolen from 33 restaurants in the United States — including three in the Philadelphia region.

System administrators aren’t likely to get much rest this summer. KnowBe4 CEO Stu Sjouwerman issued a “second-gen malware alert” to warn IT managers of new threats bursting on the scene.

Data analysis company Splunk is announcing a series of price slashes, but at the same time is pledging 100 percent uptime guaranteed in a move that has already garnered much media attention.

Security experts are warning of new persistent malware designed to evade detection by traditional tools by residing only in the computer registry.

Trend Micro's Tom Kellermann on Responding to Evolving Attacks, Strategies

Trend Micro Smart Protection Complete is an endpoint protection suite providing comprehensive threat protection for mid-sized and large enterprise.

22 Jump Street and Transformers: Age of Extinction topped the list of summer flicks used in social engineering, according to a Tuesday post by Trend Micro.

Where traditional malware is found in files embedded in your computer, Trend Micro’s Trend Labs has found new malware, called TROJ_POWELIKS.A, which hides code within the Windows Registry

A new piece of malware called Poweliks can seize control of a Windows computer — and it can't be detected by antivirus programs. That's because it doesn't download any files to the infected computer; instead, it resides as encrypted text in the computer's registry. From there it can seize control of the computer's processes to do things such as download more malware onto the computer.

A new piece of malware called Poweliks can seize control of a Windows computer — and it can't be detected by antivirus programs. That's because it doesn't download any files to the infected computer; instead, it resides as encrypted text in the computer's registry. From there it can seize control of the computer's processes to do things such as download more malware onto the computer.

A new malware program called Poweliks attempts to evade detection and analysis by running entirely from the system registry without creating files on disk, security researchers warn.

Cybersecurity event brings together an army of infosec nerds with a focus on threats, vulnerabilities, and innovative defenses.

Attacks on Gizmodo's Brazilian site and the website of an unnamed logistics firm hosted by the same ISP have prompted Trend Micro to investigate whether “a vulnerability was used in order to penetrate the web servers,” according to a company blog post.

While law enforcement won an important battle against cyber crime by taking down the Gameover Zeus botnet and hampering the threat of CryptoLocker malware, that hasn't stopped persistent and innovative criminals from producing variants on file-encryption malware like the recently detected Cryptoblocker, according to Trend Micro.

Trend Micro’s one-time password (OTP)-based two-factor authentication bypass report (PDF) is hardly news to those in the tech world, but it is well-packaged and even branded with a weird name - Operation Emmental (also known as Swiss cheese) - how media-ready!

Cloud-based antivirus vendor Webroot is investing in joint marketing and seminars, white papers, training and support to grow its base of resellers in North America and attract managed service providers with a newly released console.

What the Goodwill breach illustrates -- and why old hacker tricks continue to work -- is the inadequacy of payment system standards. "Almost all major retail and credit card breaches occurred where a vendor or merchant was actually in PCI-DSS compliance," said Vijay Basani, CEO of EiQ Networks. "Regulations in general incentivize merchants to do just enough to pass a security audit."

The CAN SPAM Act is now 11 years old and as good as it has been, the Act needs to be updated to address the realities of modern marketing.

BlackBerry has always touted its mobile devices as secure. But now it plans to make them “more secure” by acquiring a German company that specializes in voice encryption.

Malware tied to the Operation Emmental attacks that have plagued bank customers in Switzerland and three other nations first surfaced in 2013. But variants of the malicious code only recently gained the ability to bypass SMS-based two-factor authentication systems, says security vendor Trend Micro.

When you go online to bank, you probably assume the site – along with your transaction – is secure. However, a new report shows that your banking experience could be more vulnerable than you think.

The threat report from Japanese security company Trend Micro was blunt. Two-factor authentication was successfully compromised by criminals and the victims were customers of 34 different financial institutions in Japan, Switzerland, Austria and Sweden.

Rules designed to thwart man-in-the-middle attacks; could mean extra work for IT shops

Law enforcement authorities announced the indictment of six people in connection with a cybercrime operation that defrauded users of the StubHub ticketing service.

Cybercriminals are sneaking past security protections to access online accounts across 34 banks in Switzerland, Sweden, Austria and Japan. And in doing so, experts say, the hackers are defeating what’s often touted as one of the more effective online security protocols.

More than 30 banks have been targeted by a cyberattack designed to steal funds from customers’ accounts.

Be very careful which MH17 news stories you click on, especially on Facebook and Twitter, where scammers are exploiting the tragedy to spam you.

At last week’s Microsoft’s Worldwide Partner Conference (WPC), I had coffee with J.D. Sherry, Vice President, Technology and Solutions, Trend Micro. It was a chance to rediscover Trend Micro and thus reintroduce it to the SMB Nation community.

Assisting law enforcement, Trend Micro says 34 banks targeted in Operation Emmental

Operation Emmental Shreds Bank Defenses

2FA Systems Used by Banks Bypassed with Malware, Rogue Mobile Apps

So far, criminals have targeted users in Switzerland, Austria, Sweden, and Japan, Trend Micro revealed. The group, believed to be located in a Russian-speaking country, was also linked to attacks dating back to 2011 – though, at that time, saboteurs were spreading “off-the-shelf” banking malware, like SpyEye, Sancho wrote.

Assisting law enforcement, Trend Micro says 34 banks targeted in Operation Emmental

Researchers at the computer security company Trend Micro have named a new attack on online banking Emmental. Why? Like the Swiss cheese, the researchers said, online banking protections may be “full of holes.”

More than 30 financial institutions in six countries have been defrauded by sophisticated criminal software that convinces bank customers to install rogue smartphone programs, a major security company reported on Tuesday.

Online fraudsters have predictably jumped on the tragic downing of Malaysian flight MH17 to trick users to click on spammy and malicious Twitter links which could lead to malware infection, according to Trend Micro.

To combat the growing threat of online breaches, companies and governments are hiring executives whose main responsibility is to make sure data systems are secure.

MH17 related discussions are being hashjacked

Fake apps dressed up to look like official ones but actually designed to steal user data are increasingly targeting Android phone users, according to a study by Trend Micro.

Trend Micro finds hundreds of thousands of fake Android apps in trawl of online stores, forums

Fake apps dressed up to look like official ones but actually designed to steal user data are increasingly targeting Android phone users, according to a study by Trend Micro.

New features help protect against targeted attacks and data loss as organizations migrate to the cloud. By ChannelPro

At the Microsoft Worldwide Partner Conference (WPC), Trend Micro announced new security features for Microsoft Office 365 and Azure users.

Security architect Peter Benson is concerned New Zealand’s proposed data breach disclosure regime isn't strong enough.

The code has appeared in an underground forum, according to Denmark-based security company CSIS

In this week's On Point, we look at cloud infrastructure advances, plus new products that maximize security and a new global partner program.

Corporate networks are reliable and secure, so what’s the issue?

The top five ways to rob a credit union outlined here a year ago remain worrisome. But, ask the experts, and only one method of theft identified last year remains top of mind in 2014.

Shortly after the alert sounded at 9:10 p.m., Yahoo Japan Corp.’s risk team knew it had a problem. More than 20 million usernames and passwords belonging to its customers were being dumped into a file, primed to be stolen.

Phishing message claims to provide links to leaked iPhone 6 information and pictures.

Along with the incessant rumors about the impending release of the iPhone 6, if that is indeed what Apple is calling it, come the scams that inevitably ensue with a new product launch.

Banks worldwide have seen about 400 cases of a new malware that silently lurks on browsers until it sees that users are visiting banking websites, and then kicks into high gear to steal information, according to a Tokyo-based antivirus company.

Google's removal of search results in Europe is drawing accusations of press censorship, as stories from some of the continent's most prominent news outlets vanishes.

How pathetic is the security in many enterprises? Almost six years since the patch to stop it was issued, Conficker is still one of the most common threats.

IT vendors across the spectrum are adjusting their channel programs to be able to better manage solution provider programs on a truly global scale. Case in point is Trend Micro, which late last month announced a new global channel program. - See more at: http://www.channelinsider.com/blogs/security/trend-micros-takes-its-chan...

Trend Micro chief cybersecurity officer Tom Kellermann breaks down how to offset potential cyber threats.

Just weeks after it came across banking malware that abuses a Windows security feature, Trend Micro has spotted yet another banking malware dubbed EMOTET, which “sniffs” network activity to steal information. It looks at data sent over secured connections through its capability to hook to a range of network APIs to monitor network traffic.

Everything is moving to the cloud — even the exploits of cyber criminals.

There is yet another reason to be wary of spam email about bank transfers or invoices—it could be carrying a new, cleverly designed malware program that steals financial information.

Spam emails making the rounds in Germany are delivering banking malware identified as EMOTET, a financial threat that is beginning to make its way over to the U.S., according to researchers from Trend Micro.

This past week, the simple yet challenging game Flappy Bird surprised the world by first becoming insanely popular and then being pulled by its developer.

Users infected with a Windows trojan may be in for another devious surprise – ransomware that encrypts computer files and demands Bitcoin payment to decode the data.

Vendor Trend Micro announced it's globalizing its regional partner program, offering its worldwide partner base a standardized set of program features, benefits and requirements.

When analyzing a targeted attack against a government agency in Taiwan, security researchers from Trend Micro said they came across a variant of the PlugX remote access tool (RAT) that abuses the popular file hosting service Dropbox.

The rollout of the new program will be completed in the first quarter of 2015, and includes tiered reseller levels of Bronze, Silver, Gold and Platinum.

Along with all that cloud traffic coming into your business may be some malware.

Trend Micro's JD Sherry on Mobile Security, Internet of Things

Some joker stuffed the virus signature into the return address for a Bitcoin transaction leading to Stoned virus detections when transactions are stored on-disk.

Trend Micro is revamping its global partner program to standardize branding, naming, revenue requirements and benefits, said Partha Panda, vice president of global channels and alliances at Trend Micro.

Trend Micro released the first details of its new Global Channel Partner Program this week, promising to give reseller partners access to a host of new benefits and incentives in the goal of growing their profitability with end users.

The attack on a U.S. hedge fund’s network, which a cybersecurity contractor said last week disrupted the firm’s high-speed trading and stole its data, is but one among many.

Medtronic Inc, the world's largest stand-alone medical device maker, was the victim of a cyber attack and lost some patient records in separate incidents last year, it said in a regulatory filing on Friday.