Media Coverage

The OCSF represents a great direction for the security industry. We are coming together to fight our shared competitor: cybercriminals. Success for OCSF is threefold: growth for the project, growth for Trend Micro and, most importantly, growth for business users.

At Black Hat USA 2022, Brian Gorenc, Trend Micro senior director of threat research, and Dustin Childs, ZDI senior communications manager, discussed the current state of bug bounty programs.

China-linked cyberespionage group Iron Tiger was observed using the compromised servers of a chat application for the delivery of malware to Windows and macOS systems, Trend Micro reports.

Trend Micro examines nine different categories of threats against the metaverse and inside the metaverse, including cyber-physical crime, financial fraud, legal implications and more.

One thing that makes cybersecurity more difficult is that the array of tools organizations rely on often speak their own language—referring to the same things with unique or proprietary terminology. The Open Cybersecurity Schema Framework (OCSF) project—unveiled today at Black Hat 2022—plans to change that.

Trend Micro’s concern is about increased illegal and criminal activity in Metaverse. Its report points towards the developing security models in the “darkverse.”

Activist investor ValueAct Capital Partners said on Tuesday it has built an 8.7% stake in cybersecurity software provider Trend Micro Inc, driving shares of the Tokyo-listed firm more than 9% higher. The investment comes as Trend Micro, which has a market value of over $8 billion and revenue of $1.9 billion, shifts into a cloud-based cybersecurity platform.

Threat actors have modified SolidBit ransomware to focus their sights on gamers and social media users. Researchers at cybersecurity firm Trend Micro discovered the SolidBit variant disguised as a League of Legends account checker tool.

These 17 dropper apps, collectively dubbed DawDropper by Trend Micro, masqueraded as productivity and utility apps such as document scanners, QR code readers, VPN services, and call recorders, among others. All these apps in question have been removed from the app marketplace.

"There is no question that, whether it is law enforcement pressure or the defenders getting better, that we are seeing that these groups are forced to evolve — they have to get better at what they are doing," says Jon Clay, vice president of threat intelligence for Trend Micro.

Trend Micro has unveiled additions to its Cloud One platform designed to make intrusion prevention and protecting containerized workloads easier and less costly for users of the Amazon Web Services public cloud.

Cybercriminals are targeting victims in a number of different ways with fake cryptocurrency wallet apps, said Trend Micro researchers in January.

In April, the company unveiled Trend Micro One, a new unified cybersecurity platform it says will make it easier and more efficient for channel partners and customers to view and assess their attack surfaces and risk postures.

Dustin Childs of Trend Micro’s Zero Day Initiative said it “allows an attacker to execute code as SYSTEM, provided they can execute other code on the target.”

A leader in cloud and enterprise cybersecurity, Trend Micro has around 7,000 employees across 65 countries, with its cyber security platform protecting 500,000+ organisations and 250+ million individuals across clouds, networks, devices, and endpoints.

The findings come after Trend Micro first reported cryptominer deployment as a result of poor security practices.

Security researchers at Trend Micro have identified a new ransomware family that is being delivered as a fake Google Software Update application.

This means that organizations will buy more products from fewer vendors, and big cybersecurity tech kahunas like Check Point, Cisco, Crowdstrike, Fortinet, Palo Alto Networks, Trellix, and Trend Micro understand this.

In a recent attack, researchers with Trend Micro found evidence that pointed to the ransomware group exploiting the PrintNightmare vulnerability (CVE-2021-34527), a remote code execution flaw in the Windows print spooler service that Microsoft issued patches for in July 2021.

This is not the first time that security researchers have sounded a warning on hackers-for-hire. Trend Micro, for instance, reported on the Void Balaur threat in November 2021.

"The attack surface is larger than it has ever been, so it's a fertile ground for finding and abusing vulnerabilities," says Dustin Childs, communications manager for Trend Micro's Zero Day Initiative, the largest vendor-agnostic bug bounty program.

According(Opens in a new window) to Trend Micro, the gang also previously recruited company insiders to help them hack a target’s network. “LockBit has been detected all over the globe, with the US seeing most of the attack attempts from June 2021 to January 20, 2022, followed by India and Brazil,” the security firm wrote in a February report.

The number of security threats coming through email is growing once again, according to new research from Trend Micro.

According to research by cybersecurity firm Trend Micro, the “rise of deepfakes raises concern: It inevitably moves from creating fake celebrity pornographic videos to manipulating company employees and procedures.”

Trend Micro‘s chief technology strategy officer David Chow expects security vendor collaboration and consolidation to play a significant role in national security, he told SDxCentral in an interview at the RSA Conference.