Corporate Partners

Top IT Security Bloggers

TrendLabs - Malware Blog
  • URSNIF: The Multifaceted Malware

    TrendLabs - Malware Blog
    The URSNIF malware family is primarily known for being a data-stealing  malware, but it’s also known for acquiring a wide variety of behavior. Known URSNIF variants include backdoors (BKDR_URSNIF.SM), spyware (TSPY_URSNIF.YNJ), and file infectors (PE_URSNIF.A-O). December 2014: Rise in URSNIF infections brought about by file infection routines In December 2014 we discussed a rise in URSNIF infections, […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroURSNIF: The Multifaceted Malware
  • Macro-based Malware Increases Along with Spam Volume, Now Drops BARTALEX

    TrendLabs - Malware Blog
    Early this year Microsoft reported an increase in macro-related threats being used to spread malware via spam. Similarly, we’ve been seeing a drastic increase in spammed emails with attached Microsoft Word documents and Microsoft Excel spreadsheets that come with embedded macros. Macros are a set of commands or code that are meant to help automate […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroMacro-based Malware Increases Along with Spam Volume, Now Drops BARTALEX
  • Sextortion in the Far East Includes Mobile Spyware

    TrendLabs - Malware Blog
    Today, personal communication is greatly enabled and enhanced by various messaging apps that provide text messaging, voice calls, photo sharing, and even video chat. These apps are often found in smartphones—devices that have all the features of a desktop computer, plus Wi-Fi, cellular, GPS, and data connectivity. Cybercriminals have taken advantage of the convergence of the power of the smartphone […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroSextortion in the Far East Includes Mobile Spyware
  • DMARC and Spam: Why It Matters

    TrendLabs - Malware Blog
    Recently I discussed how TorrentLocker spam was using email authentication for its spam runs. At the time, I suggested that these spam runs were using email authentication to gather information about victim networks and potentially improve the ability to evade spam filters. DomainKeys Identified Mail’s (DKIM) own specification mentions the possibility of messages with from “trusted sources” and with a […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroDMARC and Spam: Why It Matters
  • Phishing and the .gov TLD

    TrendLabs - Malware Blog
    Analysis by Marshall Chen, Yi Lee, and Joe Wu Brand owners frequently use SPF and DKIM to protect their brands from email forgery. For example, a brand owner could register the same domain name under multiple top-level domains (TLDs) (such as .com, .net, .org, etcetera) and announce SPF/DKIM records for all of these domains (even if they were not actively […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroPhishing and the .gov TLD
  • Freshly Patched Flash Exploit Added to Nuclear Exploit Kit

    TrendLabs - Malware Blog
    We have detected through feedback from the Trend Micro™ Smart Protection Network™ that the Nuclear Exploit Kit has been updated to include the recently fixed Adobe Flash Player vulnerability identified as CVE-2015-0336. We first saw signs of this malicious activity on March 18 this year. This particular vulnerability was only recently fixed as part of […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroFreshly Patched Flash Exploit Added to Nuclear Exploit Kit
  • CryptoWall 3.0 Ransomware Partners With FAREIT Spyware

    TrendLabs - Malware Blog
    Crypto-ransomware is once again upping the ante with its routines. We came across one crypto-ransomware variant that’s combined with spyware—a first for crypto-ransomware. This development just comes at the heels of the discovery that ransomware has included file infection to its routines. CryptoWall 3.0 We first encountered CryptoWall as the payload of spammed messages last year. We […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroCryptoWall 3.0 Ransomware Partners With FAREIT Spyware
  • OpenSSL Releases Patches to Address “Severe” Security Holes

    TrendLabs - Malware Blog
    OpenSSL said last Tuesday, March 17, that they plan to release several code fixes address a number of vulnerabilities, which include those that have been classified as “high” severity. There had been speculation building around these vulnerabilities, as the bug was hinted as “the next Heartbleed” according to reports. The fix was released today, two […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroOpenSSL Releases Patches to Address “Severe” Security Holes
  • Operation Woolen-Goldfish: When Kittens Go Phishing

    TrendLabs - Malware Blog
    Today, we are publishing a research paper on an ongoing operation launched by a threat actor group known as Rocket Kitten. Rocket Kitten Campaigns We have been able to observe two different campaigns launched by the group, one after the other, which reveal an evolution in the skills of this group. The first of these campaigns […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroOperation Woolen-Goldfish: When Kittens Go Phishing
  • Beware the “Insert and Link” Feature in Microsoft Office

    TrendLabs - Malware Blog
    Throughout course of my monitoring future and possible targeted attacks, I recently chanced upon a spear-phishing email sent to an undisclosed recipient that contains three seemingly harmless documents. I was curious about the attached documents so I first checked the one titled AlSajana Youth Center financial Report.docx. The so-called financial report turned out to be […]Post from: Trendlabs Security Intelligence Blog - by Trend MicroBeware the “Insert and Link” Feature in Microsoft Office

Editor's Recommendations

Solution Centres

Events

View all events Submit your own security event

Blog Posts

Media Release

More media release

Market Place