Articles about Trend Micro
Trend Micro buys Taiwanese deep packet sniffing firm
Global security firm Trend Micro, which has announced a deal to buy smaller network security firm Broadweb. Financial terms of the deal, announced Thursday, were not disclosed.
Broadweb's deep packet inspection technology will be dovetailed into Trend's existing lines of network security kit to improve the blocking of malicious …
Trend Micro turns RAT catcher as Taiwan cops cuff hacker
Security vendor Trend Micro has embiggened its industry collaboration credentials this week after helping Taiwanese police arrest one man in connection with a widespread targeted attack, and teaming up with Interpol on a new cyber crime prevention centre.
The targeted attack in question used the notorious Ghost remote access …
You dirty RAT: Trend Micro spots new Asia-wide attack
Security researchers are warning of yet another advanced, large-scale attack campaign using sophisticated techniques to hide itself from its targets – organisations across Asia.
Trend Micro has dubbed the campaign Naikon, based on the HTTP user-agent string “NOKIAN95/WEB” found in various targeted attacks across the region in …
Trend Micro squishes 'stuck in a loop' SafeSync bug
Trend Micro has issued software patches for its SafeSync product after some users complained that the software was not syncing files between two or more devices properly.
Posts of complaints on a user forum, and a tip from a Reg reader, suggested the software's synchronisation of files between devices was not functioning and …
New trend: Trojan which steals your pics instead of your text
Miscreants have developed a strain of malware that steals image files from compromised systems.
The Pixsteal-A Trojan dispenses with the conventional tactic of only stealing text files, instead concentrating on uploading .jpg, .jpeg, and .dmp (memory dump) files from infected machines onto a remote FTP server.
The switch in …
Android malware under blog control says Trend Micro
Trend Micro is reporting a Chinese Android malware that operates partly under the command and control of a blog.
The ANDROIDOS_ANSERVERBOT.A malware is disguised as an e-book reader offered on a third-party Chinese app store. It uses two command and control servers, one of them served out of a blog with encrypted posts. Posts to …
Trend Micro buys encryption firm
Trend Micro has agreed to buy encryption specialist Mobile Armor. Financial terms of the deal, announced on Tuesday, were not disclosed.
St Louis, Missouri-based Mobile Armor markets data-protection software that offers full-disk, file/folder, and removable media encryption for endpoints (laptops, tablet PCs, and smartphones). …
Facebook cosies up to ESET for malware detection
Facebook, which earlier this year started partnering with F-Secure and Trend Micro for malware detection, has added Slovak vendor ESET to its suite of security products.
The previous tie-ups, detailed here, are worth noting to put the new partnership in context. F-Secure and Trend both pointed Facebook users at their free online …
Lads from Lagos using 'Predator Pain' on hapless 419 victims
Advanced-fee fraudsters are adopting the tactics of state-sponsored hackers in attacks targeting small- to medium-sized businesses, rather than large corporates, according to research from Trend Micro.
419 gangs are using the Predator Pain and Limitless keyloggers to steal network credentials through spear-phishing attacks, …
A life of cybercrime, a caipirinha and a tan: Fraudsters love a Brazilian
Brazil is the only market that offers training services for cybercriminal wannabes, making it possible to start a new career in cybercrime for just $500.
Training modules, hands-on exercises, interactive guides, instructional videos, as well as post-training support are available, according to a new report of the Brazilian …
Crooks are using proxy servers to build more convincing phishing sites – new claim
Crooks using phishing pages to grab victims' passwords have apparently upped their game – by using proxy servers rather than static pages to craft legit-looking websites.
Normally, thieves recreate a web page – such as a login page for an online shop or webmail – and stick it on a compromised server, then direct marks towards …
Securobods warn of wide open backdoor in Netis/Netcore routers
Update
Routers sold under the brand Netis by Chinese security vendor Netcore have a hardcoded password that leaves users with a wide-open backdoor that could easily be exploited by attackers, claim researchers.
The backdoor allows cyber-criminals to easily change settings or run arbitrary code on routers, securobods at Trend Micro warn …
Not sure what RFID is? Can't hack? You can STILL be a card fraudster with this Android app
Cybercrooks have developed an Android app that makes it possible to hack RFID payment cards, researchers discovered after a Chilean transport system was defrauded.
The app at the centre of the scam hacked into the user’s radio frequency ID (RFID) bus transit card in order to recharge credits. The fraud-enabling Android tool, …
Robin Hood virus: Chinese hackers target nation's wealthy
It seems China's state-supported hackers are being overshadowed by the black hat scene as the latter appears to have doubled in size – with some brazen crackers turning to carding the nation's wealthiest.
A Trend Micro report dubbed The Chinese Underground in 2013 [PDF] issued this week reveals the black hat hacking scene has …
Sony Pictures MEGAHACK: Securobods pull out probes, analyse badness
Security experts have been able to obtain and analyse samples of the malware linked to the Sony Pictures breach.
An FBI advisory issued on Monday, leaked to Reuters, warned US businesses to be vigilant about a new strain of “destructive” malware.
The link between the Sony breach and the malware described by the FBI is yet to be …
Attackers planting banking Trojans in industrial systems
Trend Micro researcher Kyle Wilhoit says the latest attacks on SCADA and industrial control networks are turning out to carry rather pedestrian banking Trojans, and have been on the rise since October 2014.
Talking to DarkReading, Wilhoit said rather than Stuxnet-style attacks, ne'er-do-wells are dropping banking Trojans into …
Another day, another nasty Android vuln
The security researcher who last year sucked thousands of IDs out of Apple's Developer Centre site has turned his gaze onto Android and turned up a bug that Trend Micro says is exploitable.
According to Ibrahim Balic, the bug causes memory corruption on Android 4.2.2 , 4.3 and 2.3 at least, but he suspects all Android versions …
Trend Micro lays down bread for humyo cloud service
Trend Micro has bought UK-based consumer and micro business cloud storage service provider humyo, with the target's file synchronisation technology apparently the cherry on the cake.
This technology syncs files between a users' connected devices and humyo's cloud vault, meaning the humyo cloud is like Dropbox with added …
Attackers raid SWISS BANKS with DNS and malware bombs
Attackers suspected of residing in Russia are raiding Swiss bank accounts with a multi-faceted attack that intercepts SMS tokens and changes domain name system settings, researchers have warned.
The attacks sported a clever implementation of malware that pointed victim machines to replica phishing bank sites when they attempt to …
AT LAST: Australia gets its very own malware
Australians are being targeted by a new variant of the Carberp malware under what appears to be renewed criminal interest in the antipodes.
The modified trojan, Carberp.C, was spread through a spam operation masquerading as a payment invoice.
Virus writers pushed the malware out a day after coding it, Symantec researcher …
Dropbox used as command and control for Taiwan time bomb
A remote access trojan (RAT) is using Dropbox for command and control in a targeted attack against the Taiwanese Government, malware analyst Maersk Menrige says.
The upgraded PlugX RAT is the first targeted attack to use Dropbox to update command and control settings, Menrige said, as distinct from other malware and ransomware …
Hackers pop German steel mill, wreck furnace
Talented hackers have caused "serious damage" after breaching a German steel mill and wrecking one of its blast furnaces.
The hack of the unnamed mill, detailed in the annual report of the German Federal Office of Information Security, was pulled off after a victim fell for a phishing email.
Hackers then pivoted to the …
VXers Shellshocking embedded BusyBox boxen
Malware writers have crafted new wares to attack embedded devices running BusyBox and not yet patched against the ShellShock vulnerability, researcher Rhena Inocencio says.
Miscreants' tool of choice for such attacks is malware called "Bashlite" that, once executed on a victim machine, probes for devices such as routers and …
Trend Micro to eyeball malware from cloud
Trend Micro has unveiled a major update to its flagship scanning tools that puts your virus signature database online, plus a modular security and system management suite with partner BigFix.
Trend Micro's updated OfficeScan Client/Server Suite includes an interesting change to the way its flagship scanning software keeps its …
Not your father's spam: Trojan slingers attach badness to attachment WITHIN attachment
Cybercrooks are upping the ante by loading malware as an attachment inside another attachment in a bid to slip past security defences.
A new variant of the Upatre Trojan comes bundled in spammed messages that imitate emails from known banks such as Lloyds Bank and Wells Fargo. The .MSG file of the malicious emails contains …
Like WhatsApp? Meet 'desktop' version... and his BANK ACCOUNT RAIDING Trojan pal
Scammers have slung together a scam designed to trick users into running malware disguised as a "desktop version" of the ultra-popular WhatsApp mobile messaging app.
Links promoted through a run of spam emails that began appearing last week actually lead to a banking Trojan rather than a PC version of the mobile-only app, Trend …
Linux 'GRINCH' vuln is AWFUL. Except, er, maybe it isn't
A dispute has arisen about the seriousness of a vulnerability in Linux, dubbed "Grinch", that supposedly creates a privilege escalation risk.
The flaw resides in the Linux authorisation system, which can unintentionally allow privilege escalation, granting a user “root", or full administrative, access.
“With full root access, …
Trend Micro boosts Vista package, extends Hotmail deal
Security provider Trend Micro yesterday announced a brace of Microsoft-based strategies, rolling out improvements for its combo offering on Vista and proclaiming that it will handle antivirus for Hotmail/Live webmail services for a further year.
Users running Trend Micro Internet Security on Vista platforms get two enhancements …
Trend Micro buys leak prevention firm
Trend Micro has acquired data leak prevention firm Provilla, in an agreement that expands its business beyond its core antivirus and content security markets. Financial terms are undisclosed.
Data leaks potentially expose firms to security, intellectual property, financial, privacy and compliance threats.
Provilla's technology …
Trend Micro snaps up UK-based email crypto firm
Trend Micro, the security firm best known for its PC-cillin anti-virus software, has acquired UK-based email encryption firm Identum. Terms of the deal, announced Monday, were undisclosed.
Identum's email encryption technology will be rolled into Trend's existing portfolio of content and web-security products under the Trend …
China's mobile underground revealed in new report
China plays host to a vast and highly sophisticated “mobile underground” where cyber criminals can buy the tools to launch attacks for as little as 100 yuan (£9.70), according to a new report from security vendor Trend Micro.
The Mobile Cybercriminal Underground Market in China is the firm's follow up to two separate reports on …
Trend Micro CEO in SEC probe
The Securities and Exchange Commission (SEC) is considering enforcement action against the chief executive of Trend Micro, Eva Chen, involving her husband Daniel Chiang and the trading of stock in SINA Corporation, the Chinese online media and wireless services firm. Chiang is former co-chairman of SINA Corporation.
SEC …
Hackers prowl for Trend Micro vuln
Hackers have begun actively scanning for recently announced vulnerabilities in Trend Micro's ServerProtect product.
Security watchers at the Internet Storm Centre (ISC) have noted a huge upsurge of traffic on TCP port 5168, associated with security bugs in ServerProtect (an enterprise software product designed to protect …
Flappy Bird's ANIMATED CORPSE may spread malware PLAGUE
Cybercrooks have been quick to latch onto the hype about Flappy Bird's demise by laying a variety of malware-based traps.
Counterfeit Flappy Bird Android apps packing malware have been spotted all over the web, with sightings by both Trend Micro and Sophos, among others.
Trend warns that counterfeit copies of the mobile game …
Kaspersky exposes SONY-CRIPPLING malware DETAILS
Kaspersky bod Kurt Baumgartner has released more details on the Sony-plundering malware and links it to attacks on Saudi Aramco and South Korea.
Research conducted in the wake of the epic Sony breach last month had connected those behind the attack known as the Guardians of Peace (GOP) with the 2012 hacking of Saudi Aramco by ' …
Rare AutoCAD malware rigs drafting machines for follow-up attacks
Security researchers have discovered a rare strain of AutoCAD malware that opens up compromised machines to secondary exploits.
ACM/SHENZ-A poses as a legitimate component of AutoCAD software for computer-aided design (CAD). But analysis by security researchers at Trend Micro has revealed that the malicious file opens up systems …
Attack flogged through shiny-clicky social media buttons
Web admins beware: social media buttons that load scripts from unknown external sites could see your sites foisting the FlashPack exploit kit to visitors.
Several sources warn that popular JavaScript social media panels are being modified to load external resources that pulled down FlashPack, formerly known as SafePack, which …
Trend Micro sees resellers grow
Since launching its "Worry Free" bundle of services in late 2005, Trend Micro has seen improved interest from the channel - it has signed up 50 per cent more resellers since launch.
The package is aimed at smaller businesses. It provides a bundled package and simple maintenance. It will protect servers, clients and messaging …
Something smells PHISHY: It's the celeb nudie iCloud PERV trap...
Consumers are being warned to be on their guard against phishers' fake Apple emails and texts designed to exploit the publicity about this week's nude celeb picture flap.
In addition to scam emails designed to trick gullible recipients into logging into phishing sites, Symantec warns of a likely upsurge in fraudulent text …
Ultimate hardware hack: Home Depot nailed by vice merchants
Do-it-yourself kingpin Home Depot has confirmed a report it was breached indicating the compromise occurred in April this year.
The US retail chain was working with law enforcement over compromise of payment terminals across stores in the country.
Chief executive of the hacked firm Frank Blake admitted the breach in a terse …
Shellshock: 'Larger scale attack' on its way, warn securo-bods
The Shellshock vulnerability has already become the focus for malicious scanning and at least one botnet but crooks are still testing the waters with the vulnerability and much worse could follow, security watchers warn.
Net security firm FireEye said it has seen all manner of overtly malicious traffic leveraging the Bash bug, …
Trend taps Third Brigade for security and compliance tech
Internet security firm Trend Micro has acquired security and compliance firm Third Brigade. Terms of the deal, announced Wednesday and expected to close in the second quarter of 2009, were undisclosed.
Trend said the agreement to buy the privately-held firm would accelerate its dynamic datacenter security strategy.
Third …
'80s hacker turned journo, IT crime ace Steve Gold logs off
Obit
Steve Gold, a former hacker who became a respected information security journalist, has died following complications from heart surgery. Tributes to Gold from the tight-knit UK security and publishing communities have been pouring in following his death, aged 58.
Gold unwittingly became famous in the mid '80s when he …
Stale Blackhole leads to dried-up spam, claim badhat-probers
Security researchers at Trend Micro reckon that Blackhole, cybercrooks' preferred tool for running drive-by download attacks from compromised websites, is no longer being updated. This means the utility - which was available for rent at around $50 a day - has quickly gone stale.
Nature abhors a vacuum, though, and malware- …
CryptoLocker creeps lure victims with fake Adobe, Microsoft activation codes
Miscreants have brewed up a variant of the infamous CryptoLocker ransomware that uses worm-like features to spread across removable drives.
The recently discovered CRILOCK-A variant can spread more easily than previous forms of CryptoLocker. The latest nasty is also notable because it comes under previously unseen guises - such …
Obamacare goes LIVE, and so do the survey-spewing spambots
Obamacare-related spam scams surfaced well before sign-ups to the controversial Affordable Care Act began on Tuesday, 1 October.
Spam containing the terms “medicare”, “enrollment” and “medical insurance” started surfacing during the first week of September and continues to clog users' inboxes. Links in the spam messages …
WHITE HOUSE network DOWN: Nation-sponsored attack likely
Hackers have disrupted computer operations at the White House after breaking into its unclassified internal network.
The attack, blamed by US government sources on Russian hackers, has resulted in the disruption of some services while incident response teams work to contain the intrusion.
The White House network is under …
Kmart apologizes to customers after month-long security breach
Discount store Kmart admitted some customers’ payment cards have likely been “compromised” as it became the latest mega retailer to fall victim to cyber-crims.
The parent of the chain, Sears Holding Corp, said the IT team discovered late Thursday that its payment systems had been breached, and further investigations indicate …
Dropbox squashes boring bug, restores file sharing
Dropbox has restored sharing services after patching a flaw that allowed attackers to access shared files under specific conditions.
The simple vulnerability meant the location of the shared files could be disclosed to website administrators via referral headers.
That would only happen if a user clicked a link to the website …
IEEE expands malware initiatives
Standards body the IEEE has launched two new anti-malware initiatives designed to help software and security vendors spot malware that's been inserted into other software, and improve the performance of malware detection by cutting down on false positives.
The organisation's Anti-Malware Support Service (AMSS) is designed to …
