Credit to Author: Sunil Bharti| Date: Mon, 21 Oct 2024 00:00:00 +0000
We observed an unknown threat actor abusing exposed Docker remote API servers to deploy the perfctl malware.
Read moreCredit to Author: Jaromir Horejsi| Date: Wed, 16 Oct 2024 00:00:00 +0000
This article uncovers a Golang ransomware abusing AWS S3 for data theft, and masking as LockBit to further pressure victims. The discovery of hard-coded AWS credentials in these samples led to AWS account suspensions.
Read moreCredit to Author: Jacob Santos| Date: Tue, 15 Oct 2024 00:00:00 +0000
Trend Micro’s Threat Hunting Team discovered EDRSilencer, a red team tool that threat actors are attempting to abuse for its ability to block EDR traffic and conceal malicious activity.
Read moreCredit to Author: Charles Adrian Marty| Date: Mon, 14 Oct 2024 00:00:00 +0000
Trend Micro researchers have uncovered a surge of malicious activities involving a threat actor group that we track as Water Makara. This group is targeting enterprises in Brazil, deploying banking malware using obfuscated JavaScript to slip past security defenses.
Read moreCredit to Author: Mohamed Fahmy| Date: Fri, 11 Oct 2024 00:00:00 +0000
Trend Micro’s investigation into the recent activity of Earth Simnavaz provides new insights into the APT group’s evolving tactics and the immediate threat it poses to critical sectors in the UAE.
Read moreCredit to Author: Mohamed Fahmy| Date: Fri, 11 Oct 2024 00:00:00 +0000
Trend Micro’s investigation into the recent activity of Earth Simnavaz provides new insights into the APT group’s evolving tactics and the immediate threat it poses to critical sectors in the UAE.
Read moreCredit to Author: Kyle Philippe Yu| Date: Fri, 20 Sep 2024 00:00:00 +0000
Trend Micro tracked this group as Water Bakunawa, behind the RansomHub ransomware, employs various anti-EDR techniques to play a high-stakes game of hide and seek with security solutions.
Read moreCredit to Author: Abdelrahman Esmail| Date: Fri, 30 Aug 2024 00:00:00 +0000
Trend Micro discovered that old Atlassian Confluence versions that were affected by CVE-2023-22527 are being exploited using a new in-memory fileless backdoor.
Read more