Trend Micro Research : Cyber Threats

Fake CAPTCHA Attacks Deploy Infostealers and RATs in a Multistage Payload Chain

Fake CAPTCHA Attacks Deploy Infostealers and RATs in a Multistage Payload Chain 2025-05-22 at 12:23 By We have detected a new tactic involving fake CAPTCHA pages that trick users into executing harmful commands in Windows. This scheme uses disguised files sent via phishing and other malicious methods. This article is an excerpt from Trend Micro […]

React to this headline:

Fake CAPTCHA Attacks Deploy Infostealers and RATs in a Multistage Payload Chain Read More »

Earth Ammit Disrupts Drone Supply Chains Through Coordinated Multi-Wave Attacks in Taiwan

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cyber Threats, Trend Micro Research : Research / SecurityTicks

Earth Ammit Disrupts Drone Supply Chains Through Coordinated Multi-Wave Attacks in Taiwan 2025-05-13 at 10:16 By Trend™ Research discusses the evolving tradecraft of threat actor Earth Ammit, proven by the advanced toolset used in its TIDRONE and VENOM campaigns that targeted the drone supply chain. This article is an excerpt from Trend Micro Research, News

React to this headline:

Earth Ammit Disrupts Drone Supply Chains Through Coordinated Multi-Wave Attacks in Taiwan Read More »

Exploring PLeak: An Algorithmic Method for System Prompt Leakage

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Artificial Intelligence (AI), Trend Micro Research : Cyber Threats, Trend Micro Research : Research / SecurityTicks

Exploring PLeak: An Algorithmic Method for System Prompt Leakage 2025-05-01 at 12:03 By What is PLeak, and what are the risks associated with it? We explored this algorithmic technique and how it can be used to jailbreak LLMs, which could be leveraged by threat actors to manipulate systems and steal sensitive data. This article is

React to this headline:

Exploring PLeak: An Algorithmic Method for System Prompt Leakage Read More »

Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cyber Threats, Trend Micro Research : Research / SecurityTicks

Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations 2025-04-24 at 05:08 By In this blog entry, we discuss how North Korea’s significant role in cybercrime – including campaigns attributed to Void Dokkaebi – is facilitated by extensive use of anonymization networks and the use of Russian IP ranges. This article is an excerpt

React to this headline:

Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations Read More »

CTEM + CREM: Aligning Your Cybersecurity Strategy

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cloud, Trend Micro Research : Compliance & Risks, Trend Micro Research : Cyber Threats, Trend Micro Research : Endpoints, Trend Micro Research : Expert Perspective, Trend Micro Research : Exploits & Vulnerabilities, Trend Micro Research : Network / SecurityTicks

CTEM + CREM: Aligning Your Cybersecurity Strategy 2025-04-09 at 05:41 By Cyber threats evolve daily, and organizations need to move beyond traditional security approaches to stay ahead. That’s why Continuous Threat Exposure Management (CTEM), a concept introduced by Gartner, has been gaining traction. CTEM isn’t just another cybersecurity buzzword; it’s a structured, continuous program designed

React to this headline:

CTEM + CREM: Aligning Your Cybersecurity Strategy Read More »

GTC 2025: AI, Security & The New Blueprint

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Artificial Intelligence (AI), Trend Micro Research : Cloud, Trend Micro Research : Cyber Threats, Trend Micro Research : Expert Perspective / SecurityTicks

GTC 2025: AI, Security & The New Blueprint 2025-04-08 at 03:31 By From quantum leaps to AI factories, GTC 2025 proved one thing: the future runs on secure foundations. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source React to this headline:

React to this headline:

GTC 2025: AI, Security & The New Blueprint Read More »

Capacity is Critical in Riskier Threat Landscape

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Artificial Intelligence (AI), Trend Micro Research : Cloud, Trend Micro Research : Compliance & Risks, Trend Micro Research : Cyber Threats, Trend Micro Research : Expert Perspective / SecurityTicks

Capacity is Critical in Riskier Threat Landscape 2025-04-04 at 10:32 By International cooperation, reporting, and capacity building are critical to enhance cybersecurity defenses. Effective governance in an increasingly risky landscape requires visibility as well as coordinated vulnerability disclosure. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source React to

React to this headline:

Capacity is Critical in Riskier Threat Landscape Read More »

AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cyber Threats, Trend Micro Research : Endpoints, Trend Micro Research : Research / SecurityTicks

AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution 2025-03-11 at 10:15 By In this blog entry, we uncovered a campaign that uses fake GitHub repositories to distribute SmartLoader, which is then used to deliver Lumma Stealer and other malicious payloads. The campaign leverages GitHub’s trusted reputation to evade detection, using AI-generated content to make

React to this headline:

AI-Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution Read More »

From Event to Insight: Unpacking a B2B Business Email Compromise (BEC) Scenario

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cyber Threats, Trend Micro Research : Research, Trend Micro Research : Web / SecurityTicks

From Event to Insight: Unpacking a B2B Business Email Compromise (BEC) Scenario 2025-03-05 at 09:50 By Trend Micro™ Managed XDR assisted in an investigation of a B2B BEC attack that unveiled an entangled mesh weaved by the threat actor with the help of a compromised server, ensnaring three business partners in a scheme that spanned

React to this headline:

From Event to Insight: Unpacking a B2B Business Email Compromise (BEC) Scenario Read More »

Exploiting DeepSeek-R1: Breaking Down Chain of Thought Security

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Artificial Intelligence (AI), Trend Micro Research : Cyber Risk, Trend Micro Research : Cyber Threats, Trend Micro Research : Research / SecurityTicks

Exploiting DeepSeek-R1: Breaking Down Chain of Thought Security 2025-03-04 at 16:00 By This entry explores how the Chain of Thought reasoning in the DeepSeek-R1 AI model can be susceptible to prompt attacks, insecure output generation, and sensitive data theft. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source React

React to this headline:

Exploiting DeepSeek-R1: Breaking Down Chain of Thought Security Read More »

Future of Cybersecurity: Will XDR Absorb SIEM & SOAR?

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cloud, Trend Micro Research : Compliance & Risks, Trend Micro Research : Cyber Crime, Trend Micro Research : Cyber Threats, Trend Micro Research : Endpoints, Trend Micro Research : Expert Perspective, Trend Micro Research : Network / SecurityTicks

Future of Cybersecurity: Will XDR Absorb SIEM & SOAR? 2025-01-31 at 22:20 By XDR is reshaping cybersecurity by unifying and enhancing SIEM and SOAR capabilities into a single platform. It addresses alert fatigue, improves incident correlation, simplifies operations, and enhances efficiency for SOC teams. This article is an excerpt from Trend Micro Research, News and

React to this headline:

Future of Cybersecurity: Will XDR Absorb SIEM & SOAR? Read More »

Lumma Stealer’s GitHub-Based Delivery Explored via Managed Detection and Response

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cyber Threats, Trend Micro Research : Endpoints, Trend Micro Research : Malware, Trend Micro Research : Research / SecurityTicks

Lumma Stealer’s GitHub-Based Delivery Explored via Managed Detection and Response 2025-01-30 at 10:18 By The Managed XDR team investigated a sophisticated campaign distributing Lumma Stealer through GitHub, where attackers leveraged the platform’s release infrastructure to deliver malware such as SectopRAT, Vidar, and Cobeacon. This article is an excerpt from Trend Micro Research, News and Perspectives

React to this headline:

Lumma Stealer’s GitHub-Based Delivery Explored via Managed Detection and Response Read More »

ASRM: A New Pillar for Cyber Insurance Underwriting

ASRM: A New Pillar for Cyber Insurance Underwriting 2025-01-30 at 02:33 By ASRM transforms cyber insurance underwriting by integrating real-time risk assessments, advanced tools (NDR, EDR, Cloud Security, MDR), and proactive mitigation strategies to improve accuracy, reduce claims, and build trust. This article is an excerpt from Trend Micro Research, News and Perspectives View Original

React to this headline:

ASRM: A New Pillar for Cyber Insurance Underwriting Read More »

Invisible Prompt Injection: A Threat to AI Security

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Artificial Intelligence (AI), Trend Micro Research : Cloud, Trend Micro Research : Cyber Crime, Trend Micro Research : Cyber Threats, Trend Micro Research : Endpoints, Trend Micro Research : Expert Perspective / SecurityTicks

Invisible Prompt Injection: A Threat to AI Security 2025-01-23 at 00:07 By This article explains the invisible prompt injection, including how it works, an attack scenario, and how users can protect themselves. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source React to this headline:

React to this headline:

Invisible Prompt Injection: A Threat to AI Security Read More »

IoT Botnet Linked to Large-scale DDoS Attacks Since the End of 2024

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cyber Threats, Trend Micro Research : IoT, Trend Micro Research : Malware, Trend Micro Research : Research / SecurityTicks

IoT Botnet Linked to Large-scale DDoS Attacks Since the End of 2024 2025-01-17 at 11:19 By Since the end of 2024, we have been continuously monitoring large-scale DDoS attacks orchestrated by an IoT botnet exploiting vulnerable IoT devices such as wireless routers and IP cameras. This article is an excerpt from Trend Micro Research, News

React to this headline:

IoT Botnet Linked to Large-scale DDoS Attacks Since the End of 2024 Read More »

Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cyber Threats, Trend Micro Research : Endpoints, Trend Micro Research : Malware, Trend Micro Research : Research / SecurityTicks

Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit 2025-01-09 at 09:17 By Our blog entry discusses a fake PoC exploit for LDAPNightmare (CVE-2024-49113) that is being used to distribute information-stealing malware. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source React to this headline:

React to this headline:

Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit Read More »

Trend Micro Contributes and Maps Container Security to MITRE ATT&CK: A Game-Changer for Cyber Defense

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cyber Threats, Trend Micro Research : Research / SecurityTicks

Trend Micro Contributes and Maps Container Security to MITRE ATT&CK: A Game-Changer for Cyber Defense 2025-01-07 at 18:01 By Trend Micro leads the way by mapping its Container Security detection capabilities to the MITRE ATT&CK framework for Containers and contributing real-world attack data. This article is an excerpt from Trend Micro Research, News and Perspectives

React to this headline:

Trend Micro Contributes and Maps Container Security to MITRE ATT&CK: A Game-Changer for Cyber Defense Read More »

AI Pulse: Top AI Trends from 2024 – A Look Back

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Artificial Intelligence (AI), Trend Micro Research : Compliance & Risks, Trend Micro Research : Cyber Threats, Trend Micro Research : Endpoints, Trend Micro Research : Expert Perspective, Trend Micro Research : Network, Trend Micro Research : Social Media / SecurityTicks

AI Pulse: Top AI Trends from 2024 – A Look Back 2025-01-03 at 22:18 By In this edition of AI Pulse, let’s look back at top AI trends from 2024 in the rear view so we can more clearly predicts AI trends for 2025 and beyond. This article is an excerpt from Trend Micro Research,

React to this headline:

AI Pulse: Top AI Trends from 2024 – A Look Back Read More »

Python-Based NodeStealer Version Targets Facebook Ads Manager

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Cyber Threats, Trend Micro Research : Malware, Trend Micro Research : Research / SecurityTicks

Python-Based NodeStealer Version Targets Facebook Ads Manager 2024-12-19 at 09:46 By In this blog entry, Trend Micro’s Managed XDR team discuss their investigation into how the latest variant of NodeStealer is delivered through spear-phishing attacks, potentially leading to malware execution, data theft, and the exfiltration of sensitive information via Telegram. This article is an excerpt

React to this headline:

Python-Based NodeStealer Version Targets Facebook Ads Manager Read More »

Link Trap: GenAI Prompt Injection Attack

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Artificial Intelligence (AI), Trend Micro Research : Cyber Threats, Trend Micro Research : Data center, Trend Micro Research : Endpoints, Trend Micro Research : Exploits & Vulnerabilities, Trend Micro Research : Network, Trend Micro Research : Security Strategies / SecurityTicks

Link Trap: GenAI Prompt Injection Attack 2024-12-17 at 03:20 By Prompt injection exploits vulnerabilities in generative AI to manipulate its behavior, even without extensive permissions. This attack can expose sensitive data, making awareness and preventive measures essential. Learn how it works and how to stay protected. This article is an excerpt from Trend Micro Research,

React to this headline:

Link Trap: GenAI Prompt Injection Attack Read More »