trend micro research : malware – Page 2 – Computer Security Articles

Analyzing AsyncRAT’s Code Injection into aspnet_compiler.exe Across Multiple Incident Response Cases

Credit to Author: Buddy Tancio| Date: Mon, 11 Dec 2023 00:00:00 +0000

This blog entry delves into MxDR’s unraveling of the AsyncRAT infection chain across multiple cases, shedding light on the misuse of aspnet_compiler.exe, a legitimate Microsoft process originally designed for precompiling ASP.NET web applications.

Security TrendMicro

Attack Signals Possible Return of Genesis Market, Abuses Node.js, and EV Code Signing

November 22, 2023 admin trend micro research : articles, news, reports, trend micro research : endpoints, trend micro research : malware, trend micro research : phishing, trend micro research : research

Credit to Author: Hitomi Kimura| Date: Wed, 22 Nov 2023 00:00:00 +0000

The Trend Micro Managed XDR team encountered malicious operations that used techniques similar to the ones used by Genesis Market, a website for facilitating fraud that was taken down in April 2023.

Security TrendMicro

A Closer Look at ChatGPT’s Role in Automated Malware Creation

November 14, 2023 admin trend micro research : articles, news, reports, trend micro research : malware, trend micro research : research

Credit to Author: Veronica Chierzi| Date: Tue, 14 Nov 2023 00:00:00 +0000

This blog entry explores the effectiveness of ChatGPT’s safety measures, the potential for AI technologies to be misused by criminal actors, and the limitations of current AI models.

Security TrendMicro

Threat Actors Leverage File-Sharing Service and Reverse Proxies for Credential Harvesting

November 9, 2023 admin trend micro research : articles, news, reports, trend micro research : endpoints, trend micro research : malware, trend micro research : phishing, trend micro research : research

Credit to Author: Buddy Tancio| Date: Thu, 09 Nov 2023 00:00:00 +0000

We analyzed a phishing campaign involving malicious emails containing a link to a file-sharing solution, which further leads to a PDF document with a secondary link designed to steal login info and session cookies.

Security TrendMicro

Beware: Lumma Stealer Distributed via Discord CDN

October 16, 2023 admin trend micro research : articles, news, reports, trend micro research : exploits & vulnerabilities, trend micro research : malware, trend micro research : research

Credit to Author: Carl Malipot| Date: Mon, 16 Oct 2023 00:00:00 +0000

This blog discusses how threat actors abuse Discord’s content delivery network (CDN) to host and spread Lumma Stealer, and talks about added capabilities to the information stealing malware.

Security TrendMicro

Void Rabisu Targets Female Political Leaders with New Slimmed-Down ROMCOM Variant

October 13, 2023 admin trend micro research : apt & targeted attacks, trend micro research : articles, news, reports, trend micro research : malware, trend micro research : research

Credit to Author: Feike Hacquebord| Date: Fri, 13 Oct 2023 00:00:00 +0000

Almost a year after Void Rabisu shifted its targeting from opportunistic ransomware attacks with an emphasis on cyberespionage, the threat actor is still developing its main malware, the ROMCOM backdoor.

Security TrendMicro

DarkGate Opens Organizations for Attack via Skype, Teams

October 12, 2023 admin trend micro research : apt & targeted attacks, trend micro research : articles, news, reports, trend micro research : cyber crime, trend micro research : cyber threats, trend micro research : data center, trend micro research : endpoints, trend micro research : malware, trend micro research : network, trend micro research : privacy & risks, trend micro research : ransomware

Credit to Author: Trent Bessell| Date: Thu, 12 Oct 2023 00:00:00 +0000

We detail an ongoing campaign abusing messaging platforms Skype and Teams to distribute the DarkGate malware to targeted organizations. We also discovered that once DarkGate is installed on the victim’s system, additional payloads were introduced to the environment.

Security TrendMicro

Exposing Infection Techniques Across Supply Chains and Codebases

October 5, 2023 admin trend micro research : articles, news, reports, trend micro research : exploits & vulnerabilities, trend micro research : malware, trend micro research : mobile, trend micro research : network, trend micro research : research

Credit to Author: Aliakbar Zahravi| Date: Thu, 05 Oct 2023 00:00:00 +0000

This entry delves into threat actors’ intricate methods to implant malicious payloads within seemingly legitimate applications and codebases.