Media Coverage

Foreign intelligence services and digital crime rings are probably “digging through” the mammoth database of the more than 36 million people who registered for the extramarital dating site Ashley Madison, said Tom Kellermann, chief cybersecurity officer at security firm Trend Micro.

Tom Kellerman, chief cybersecurity officer at Trend Micro, discusses the hacking of the Ashley Madison website and subsequent release of names and other information related to the site's users. He speaks on "Bloomberg Markets." [Video]

The perils of allowing wearables in the workplace were highlighted again today in new research from Trend Micro which uncovered security and privacy issues with some of the biggest brand smart watches on the market, including the Apple Watch.

The United States makes efforts to ensure that its markets operate fairly, but those values aren't shared by hackers in the former Soviet Union and its satellites, noted Tom Kellermann, chief cybersecurity officer at Trend Micro.

Tom Kellermann, chief cybersecurity officer of threat-intelligence firm Trend Micro, says that while it's not likely the true masterminds behind this hacking and trading scheme will ever be brought to justice, it is refreshing to see law enforcement indict people who are believed to be conducting attacks that compromise market trading.

In February, after an internet-connected gas pump was hacked, Trend Micro security researchers Kyle Wilhoit and Stephen Hilt began conducting an experiment to track hackers targeting gas stations arounnd the world.

Back in April, as similar report which focused on North and South America was released by Trend Micro and the Organization of American States (OAS). That report also showed a dramatic increase in cyberattacks directed against critical infrastructure owners and operators.

A handful of attackers targeted fake fuel-tank monitors during a six-month month experiment, showing that real Internet-connected monitors are at risk, according to Trend Micro researchers.

Petrol station monitoring systems are under attack all over the world, some by possible nation state allied hackers, according to new research from Trend Micro. The cyber security giant explained in new research presented at Black Hat 2015 that attacks against these unsecured SCADA systems are no longer theoretical.

Turns out there were quite a few attacks—at least 23—between February and July, where adversaries modified information associated with gas pumps, Trend Micro's Kyle Wilhoit and Stephen Hilt said at the Black Hat security conference here. The duo observed 12 pump identifications, four pump modifications, and two distributed denial of service or denial of service attacks.

This incident motivated Kyle Wilhoit and Stephen Hilt, two security researchers at Trend Micro, to make an experiment. They set up 10 fake gas station monitoring systems and put them online as honeypots. To hackers, or anyone looking for these systems, they looked exactly like regular gas monitoring devices known as Guardian AST, which are made to check and control fuel levels in gas station tanks, and alert operators whenever they get too low.

Cybercrime has developed substantially due to bulletproof hosting service efficiency. Trend Micro's report explains how and why these services evade law enforcement officials and remain online.

Researchers at Trend Micro have reported finding a second denial-of-service (DoS) vulnerability in Android’s “mediaserver” component.

Kyle Wilhoit, senior threat researcher at Trend Micro, to break down real attacks against gas pump monitoring systems

“The Russian underground has become an economy of scale,” says Tom Kellermann, Trend Micro’s chief cyber security officer.

Trend Micro has found a flaw that uses a malformed Matroska (MKV) video in apps or websites to crash Android's "mediaserver" service, effectively turning the target device into a paperweight.

“The culture of silence regarding cyber-attacks in Asia serves as fuel to the guild of thieves who operate with impunity in the region,” said Tom Kellermann, chief cybersecurity officer at security software developer Trend Micro Inc. “The deep-seated historical mistrust in the region undermines true collaboration.”

Trend Micro was first to publish three of the Hacking Team Flash bugs. The company’s chief cybersecurity officer Tom Kellermann likens the history of laxness of Adobe’s security practices in light of Flash’s popularity to poisoning the water supply for all of a village’s wells.

“The dark web is impressively expansive and organizations of this size, conducting schemes of this magnitude, are hidden throughout it in unprecedented numbers,” said Trend Micro chief cybersecurity officer, Tom Kellermann. “With the amount of exploit kits on the market today, the financial sector must brace itself for an increased level of more intensified attacks.”

Trend Micro threat analyst Jay Yaneza said the combination of more developers using .NET in applications and the ease by which hackers can find vulnerabilities in open source software has led to a boom in point of sale (POS) malware targeting Microsoft's .NET software.

Hacking Team intrusion malware can also target iOS and Android devices. Here are the dirty details about Android attacks, from Trend Micro. Note that it warns that if you've been infected, it will be extremely difficult to clean the infection yourself. You'll have to have root privilege to the device and get help from your phone's manufacturer to flash the firmware.

On the other hand, the European Union, with its Right to Be Forgotten rules, has a "much more stringent framework than we do in the United States because we let companies get away with a lot more" here, says Paul Ferguson, a senior threat research advisor at Trend Micro.

But that may be a race that it cannot win. Paul Ferguson, senior adviser for Trend Micro, a security software provider, said that information on Ashley Madison, deleted in one online forum, is beginning to bubble up in others. Once something is published on the Internet,” he said, “it’s there forever.”

FBN’s Jo Ling Kent, Liz Claman and Trend Micro Chief Cybersecurity Officer Tom Kellerman discuss the Ashley Madison hack. [Video]

These new findings, which come from the security research company Trend Micro, indicate that Hacking Team build a fake Android news app. It was called "BeNews," which happens to also be the name of another, now defunct news site. It appears that Hacking Team was able to build the fake app so that it looked legitimate enough to be accepted into the Google Play app store. Nestled inside the app's code, however, was a backdoor to make it a mobile spy tool.