Media Coverage

Offering integration with security services from companies like Barracuda, Checkpoint, Cisco, Imperva and Trend Micro, the new offering can analyze information gathered from customers' deployments and compare it with global threat intelligence aggregated by Microsoft.

Researchers with Trend Micro have identified two new pieces of point-of-sale malware that are affecting small and medium-sized businesses (SMB) predominately in the U.S.

“One year after, the panic has subsided, but the threat goes on living. Attacks related to Shellshock continue to plague our digital world. Since the second quarter of the year, we have seen about more than 70,000 attacks using Shellshock and about 100,000 attacks using Heartbleed. One of our honeypots, which are vulnerable to Shellshock, has recorded 50 attacks in the past 15 days alone,” wrote Trend Micro.

That’s one of the takeaways from a report this week by security firm Trend Micro, which analyzed a decade’s worth of data breaches. The researchers found that businesses are at greater risk of hackings as they grow their online presence while hackers can more easily profit from stolen data.

However, unlike big companies, SMBs are less likely to use sophisticated security and backup solutions that can prevent ransomware infections and help them recover encrypted files, the Trend Micro researchers said in a blog post.

In Trend Micro's new report, dubbed "Understanding Data Breaches," the security firm explores who is most often targeted in data breaches, how they take place, and what happens to data once it leaves corporate networks.

Over the past 10 years of data breach history, 41 percent of breaches were caused not by hacking, but by device loss. Because of a particularly bad record of holding track of its devices, the healthcare industry has been responsible for more breaches than any other sector this decade, according to Trend Micro's analysis of the past 10 years of data breaches -- as catalogued by the nonprofit Privacy Rights Clearinghouse.

UK organizations were hit with on average 40% more targeted attacks than their European counterparts last year, but ended up paying far less, according to new research from Trend Micro.

A high-level hacking group dubbed Iron Tiger has been observed stealing trillions of bytes of confidential data from the United States government, US defense contractors and related companies in the United States and abroad, security company Trend Micro reports in its research paper posted Tuesday, Operation Iron Tiger: Exploring Chinese Cyber Espionage Attacks on U.S. Defense Contractors.

According to a Trend Micro report, the group – known as “Emissary Panda” or “Threat Group-3390 (TG-3390)” – dates back to 2010 when it was observed focusing on political targets and government agencies in China, the Philippines and Tibet.

According toa report released in June by Trend Micro's Forward-Looking Threat Research Team, a startling 26 percent of the sites on the Darknet are child exploitation sites.

As cybercrime continues to get worse - and more players enter the field - it's notable that at least one of the above rules is no longer unwritten, Max Goncharov, a threat researcher at the security firm Trend Micro, says in a recent update on the Russian cybercrime underground (see Why Russian Cybercrime Markets Are Thriving). "The underground market isn't very articulate about the ends toward which products sold should be used, but sometimes, users find a disclaimer stating that Russia

"Four percent may not sound like much, but it's a lot when you consider there's a new threat being created every two seconds," he told TechNewsWorld. Nevertheless, "I don't think antivirus, if modernized, is dead, because you still need to eliminate 90 percent of the noise out there, and focus your attention on how you construct your defense in depth against targeted attacks," Kellermann explained. "Everyone should use antivirus, as long as it's not solely signature-based."

The exploit consists of a specifically crafted Media Center link (.mcl) file and could be delivered to targeted users in different ways including as a download from a website, by e-mail or via instant messaging applications, the Trend Micro researchers said in a blog post Tuesday.

One of Trend's addresses was used for a profile describing a 33-year-old Los Angeles woman who is "sexy, aggressive" and "knows what she wants," wrote Ryan Flores, a threat research manager with Trend, in a blog post.

Tom Kellermann, chief cybersecurity officer at threat-intelligence firm Trend Micro, says cross-border law enforcement collaboration is at an all-time high. "The Electronic Crimes taskforces, some of which exist in Europe, are the ties that bind," he says. "Extradition is now viable, with the exception of the hacker haven that is Russia. The 78 Russian forums will remain untouchable, as they are viewed as national assets within a culture of Robin Hood."

"Companies should block all Ashley Madison related emails at the email gateway and use URL filtering for all inbound emails for those bulletproof hosts which are disseminating this crimewave," said Tom Kellermann, chief cybersecurity officer at Irving, Tex.-based Trend Micro Inc.

"The researcher had infiltrated … and was able to pose as a person of interest in this group, and they had engaged" with the researcher, says Jon Clay, senior global marketing manager for Trend Micro, which along with ClearSky today published new findings on Rocket Kitten. The spear-phishing email included a malicious link purportedly to a Trend Micro malware scanner.

Nearly six months after exposing the group, Trend Micro and ClearSky published an updated report on Rocket Kitten, a state-sponsored group targeting Israeli and European organizations.

Tom Kellermann, chief cybersecurity officer at security firm Trend Micro, says the growing impact of DD4BC on targeted organizations could be a catalyst for closer international collaboration among law enforcement agencies to catch cybercriminals.

Tom Kellermann, chief cybersecurity officer at the security firm Trend Micro, says businesses have to understand that bypassing banks' procedures for wire-transfer confirmation is exposing them to fraud. "Internal procedures should change to ensure that all requests for the transfer of funds be verified," Kellermann says.

Consumers can now expect the same level of security and privacy in the digital realm as they do in the physical.

Anyone whose name and contact information appears in the 9.7GB stolen names contact information will likely be susceptible to opening emails purportedly from Ashley Madison, divorce lawyers and private investigators, says Tom Kellerman, chief cybersecurity officer for Trend Micro.

Unfortunately, the extortion attempts like the one against Mac are likely to increase in number, sophistication and targeting, says Tom Kellerman, chief cybersecurity officer at Trend Micro.

It's called "sextortion." Criminals contact users involved in illicit online activity and try to get money in exchange for their victim's silence. It's popular in South Korea,according to a report from security firm Trend Micro, where scammers try to initiate online relationships and then blackmail those who take the bait.