Media Coverage

A September 2017 survey conducted by cyber-security solutions provider Trend Micro, in conjunction with Opinium, found that most executives are not adequately prepared for GDPR, and the fallout could be significant.

“While many ransomware families like Cerber, SLocker and Locky are increasingly pinpointing their targets, they’re still distributed globally,” said Trend Micro researchers.

Trend Micro previously attributed other incidents that attacked this vulnerability, which was patched on October 16, to the BlackOasis APT group.

Research by Trend Micro found that 73% of 1000 IT decision makers were unaware of the extent of fines that could be levied for GDPR non-compliance

“Serverless is that last step on the current line of going ‘I don’t have to run any of this stuff — I can just write code that’s directly tied to my business,'” said Mark Nunnikhoven, vice president of cloud research at Trend Micro.

"How it works is technically complex," said William Malik, vice president for infrastructure strategies at Trend Micro. "The easy answer is the attacker gets the access point to rebroadcast part of the initial handshake, analyzes that information, and then the attacker can intercept the rest of the conversation," he told TechNewsWorld.

Connecting everyday devices to the Internet seems like a great idea, but users need to be mindful of the risks, warned JD Sherry, vice president of technology and solutions at Tokyo-based antivirus-software maker Trend Micro.

Analysts at Trend Micro, a cybersecurity firm, in 2014 discovered that copies of Football Manager Handheld, a smartphone game, and TuneIn Radio, an audio app, contained malicious software that mined cryptocurrencies, the proceeds of which were probably funneled to the developers.

When it comes to the Middle Eastern and North African underground, research from Trend Micro showed that the regional cybercrime marketplace has a few unique hallmarks, including a “spirit of sharing” mindset that hinges on a feeling of brotherhood and religious alliance that transcends the illicit transactions that occur.

TrendMicro researchers said the low price point reflected a unique aspect of brotherhood and comradery unlike what is seen other market places where the players only aim to make money.

Bottom Line: In addition to effective malware protection, Trend Micro Antivirus+ Security offers layered protection against ransomware, spam filtering, and a firewall booster.

The Health Information Trust Alliance (HITRUST) and Trend Micro have created a deception-based threat detection collaboration platform that deploys “honeypots” across the healthcare ecosystem.

In July, Trend Micro and VMware announced a new partnership to tackle enterprise mobile security issues. The companies plan to create new solutions which will automatically detect and tackle mobile threats on corporate networks.

The technical excellence of the Russian hacking groups, whether or not affiliated to the FSB, escapes no-one: as long ago as September 2012, Trend Micro warned in the report Peter the Great vs. Sun Tzu, “East Asian hackers are not at the same skill level of maturity as their East European counterparts.”

A Trend Micro mid-year report recently revealed that the firm blocked 82 million ransomware threats in the first six months of 2017, as well as 3000 Business Email Compromise attempts.

In its latest cyber threat report, Trend Micro’s researchers highlight the growing number of network-based attacks targeting ATMs.

Now, more than 1,200 apps available in third-party marketplaces are exploiting Dirty Cow as part of a scam that uses text-based payment services to make fraudulent charges to the phone owner, researchers from antivirus provider Trend Micro reported on Monday.

“Use of cryptocurrency miners is on the rise in the world of cybercrime,” Trend Micro Vice President of Cloud Security Mark Nunnikhoven told SC Media. “We haven't yet seen them coupled with ransomware, but that combination is one that's likely to surface.”

In most of the newly observed attacks, Locky has been distributed alongside another ransomware family calked FakeGlobe, also known as Globe Imposter, Trend Micro says.

According to Trend Micro Inc., FakeGlobe is a form of ransomware that encrypts different files to that of Locky, meaning that potentially victims could be forced to pay up for both infections.

BEC attacks generated $5.3 billion in global losses between 2013 and 2017, Trend Micro researchers reported earlier this year.

Uncovered by cyber security researchers at Trend Micro, the nature of the campaign means it's possible for victims infected by one form of ransomware to still be vulnerable to a further attack from the next one in the rotation.

These consumers could be at greater risk of identity theft because “the more data an attacker has, the harder it is to stop them,” said Mark Nunnikhoven, a vice president with Internet security company Trend Micro.

“There’s no simple fix,” says Mark Nunnikhoven, vice president of cloud-computing research at Trend Micro. “This kind of internal network was never meant to be connected the way it is now.”

A recently malware attack has been leveraging the Hangul Word Processor (HWP) word processing application and its ability to run PostScript code, Trend Micro reveals.

"Government regulation is the only way this is going to happen," William Malik, vice president of infrastructure strategies at Trend Micro said on the panel. "Automobiles didn't get safer until the government regulated them."

The first half of the year saw a continued surge in ransomware, Business Email Compromise (BEC) and other threats, with Trend Micro blocking over 38 billion during the period, it claimed in a new report.

All that information packaged together sells for upwards of $30 per identity on online black markets, according to Mark Nunnikhoven, head of cloud research for cybersecurity firm Trend Micro.

Trend Micro researchers first spotted the banking malware using network sniffing to steal data back in 2014 and recently spotted an increase in activity in August 2017 coming from new variants that all had the potential to unleash different types of payloads

The mobile edition of the Pwn2Own hacking contest is returning for its sixth year, with a prize pool of $500,000 and new targets for security researchers. Pwn2Own is operated by Trend Micro's Zero Day Initiative (ZDI) and has both desktop and mobile events.

Cloud-based online storage service Autodesk A360 Drive has been recently abused as a malware delivery platform, according to Trend Micro.

A trojan spreading fileless malware, which Trend Micro detects as “TROJ_ANDROM.SVN,” conceals itself within two malicious files on an infected USB.

The trend in medical devices connected to the internet has opened the door to hackers being able to threaten victim's lives, Ed Cabrera, chief cybersecurity officer at the threat research firm Trend Micro, tells Wired.

Despite the move toward EMV chip cards, point-of-sale (POS) malware continues to vex merchants’ payment systems, most recently with the discovery of MajikPOS malware in North America, which TrendMicro reported on in March.

Trend Micro this week said that it will offer over $500,000 in cash prizes at Zero Day Initiative’s Mobile Pwn2Own contest, set to take place Nov. 1-2, during the PacSec 2017 Conference in Tokyo, Japan.

The trojan looks very similar to the GhostClicker malware previously analyzed by Trend Micro before its authors decided to use it to launch DDoS attacks.

According to Trend Micro, the mining malware operation includes a timer that automatically triggers the malicious WMI script every three hours.

“Passenger shipping organizations and cruise lines … can be easily impacted,” said Eduardo E. Cabrera, chief cybersecurity officer at Trend Micro, a Tokyo-based cybersecurity firm.

Trend Micro's Federico Maggi and Politecnico di Milano's Andrea Continella visit the Dark Reading News Desk to discuss ShieldFS – a new tool that protects filesystems by disrupting and actually undoing the ransomware's encryption while it's in action.

Trend Micro’s Zero Day Initiative has released details about two remote code execution zero-day flaws affecting popular freemium PDF tool Foxit Reader.

A new, vendor-neutral connected car hack has been discovered that is "indefensible by modern car security technology" and could put many drivers at risk of a critical cyberattack, according to a Wednesday blog post from security firm Trend Micro. The hack was discovered by Trend Micro's Forward-looking Threat Research (FTR) team, Politecnico di Milano, and Linklayer Labs.

Attackers who successfully exploited the vulnerability could assume control over target systems and create new accounts with full user rights, install programs, and view, edit, or delete data. Researchers at TrendMicro have found malware exploiting the same flaw but using PowerPoint files for distribution, a technique not previously seen in the wild.

Users of online dating apps and the businesses they work for could end up the target of spear phishing and social engineering scams, especially when these services make one's personal information accessible to virtually anyone, Trend Micro researchers warned in a blog post on Thursday.

Researchers at Trend Micro examined three years worth of malware from OnionDog — around 200 total samples — and found evidence that the malware was likely developed and used in joint U.S./South Korean military exercises.

Trend Micro alerts users that an email campaign which appeared a couple of months ago is currently targeting Russian-speaking enterprises and delivering a new Windows-based backdoor.

Microsoft added that an unauthenticated attacker in an enterprise setting could remotely trigger the flaw through an SMB connection, which Trend Micro researchers said is "pretty close to wormable," referring to its spreadability.

The HITRUST Alliance and Trend Micro have announced a partnership to create the HITRUST Cyber Threat Management and Response Center, which will expand HITRUST’s cyber threat information sharing program for health care.

Marcus Hutchins arrest does not appear to be directly related to WannaCry, said Mark Nunnikhoven, vice president of cloud security at Trend Micro.

According to Gilbert Sison and Janus Agcaoili, two security researchers at Trend Micro, the most recent version of the Cerber ransomware can dump browser passwords and can steal files related to Bitcoin wallets.

Trend Micro researchers are keen to explain that there are malware that are fileless only while entering a user’s system (and they eventually reveal themselves when they execute their payload), and there are completely fileless malware attacks, where the entire infection chain is fileless.