VPNFilter-affected Devices Still Riddled with 19 Vulnerabilities

Posted on:July 13, 2018 at 5:02 am
Posted in:Internet of Things, Vulnerabilities
Author:
Trend Micro

This blog tackles the recently ill-famed VPNFilter malware and if deployed devices are vulnerable to it. VPNFilter is a newly discovered, multi-stage malware (detected by Trend Micro as ELF_VPNFILT.A, ELF_VPNFILT.B, ELF_VPNFILT.C, and ELF_VPNFILT.D) that affects many models of connected devices. Based on our data from June 1 to July 12, plenty of the devices are still using old firmware versions. In fact, 19 known vulnerabilities, not only taken advantage of by VPNFilter but other malware as well, can still be detected in devices up to this day.

Posted on:July 10, 2018 at 11:47 pm
Posted in:Exploits, Vulnerabilities
Author:
Trend Micro

Patch Tuesday for July addresses 53 Microsoft and 107 Adobe vulnerabilities.

Posted on:July 3, 2018 at 5:01 am
Posted in:Malware
Author:
Trend Micro Cyber Safety Solutions Team

by Loseway Lu Despite being around for decades, cybercriminals are still using malicious macro to deliver malware, albeit in more creative ways to make them more effective. The threat actors behind a recent case used macro in a more roundabout way, with a macro that searches for specific shortcut files in the user’s system, which…

Posted on:July 2, 2018 at 6:48 am
Posted in:Bad Sites, Exploits, Malware, Vulnerabilities
Author:
Trend Micro

Exploit kits may be down, but they’re not out. While they’re still using the same techniques that involve malvertisements or embedding links in spam and malicious or compromised websites, their latest activities are making them significant factors in the threat landscape again. This is the case with Rig and GrandSoft, as well as the private exploit kit Magnitude — exploit kits we found roping in relatively recent vulnerabilities to deliver cryptocurrency-mining malware, ransomware, botnet loaders, and banking trojans.

Posted on:June 28, 2018 at 5:01 am
Posted in:Botnets, Malware
Author:
Trend Micro

by Anita Hsieh, Rubio Wu, Kawabata Kohei Six years after it was first spotted in the wild, the Necurs malware botnet is still out to prove that it’s a malware chameleon. We recently discovered noteworthy changes to the way Necurs makes use of its bots, such as pushing infostealers on them and showing a special…

Page 1 of 75312 › »

2017 Annual Security Roundup: The Paradox of Cyberthreats

North American Malware Trends: Taking a Proactive Approach to Modern Threats

2017 Mobile Threat Landscape

Trend Micro Cloud App Security 2017 Report

Understanding Motivations and Methods of Web Defacement

VPNFilter-affected Devices Still Riddled with 19 Vulnerabilities

July Patch Tuesday: Large Adobe Security Update and Patches for 18 Critical Microsoft Vulnerabilities

Malicious Macro Hijacks Desktop Shortcuts to Deliver Backdoor

Down but Not Out: A Look Into Recent Exploit Kit Activities

The New Face of Necurs: Noteworthy Changes to Necurs’ Behaviors

Security Predictions for 2018

Business Process Compromise

Stay Updated

2017 Annual Security Roundup: The Paradox of Cyberthreats

North American Malware Trends: Taking a Proactive Approach to Modern Threats

2017 Mobile Threat Landscape

Trend Micro Cloud App Security 2017 Report

Understanding Motivations and Methods of Web Defacement

VPNFilter-affected Devices Still Riddled with 19 Vulnerabilities

July Patch Tuesday: Large Adobe Security Update and Patches for 18 Critical Microsoft Vulnerabilities

Malicious Macro Hijacks Desktop Shortcuts to Deliver Backdoor

Down but Not Out: A Look Into Recent Exploit Kit Activities

The New Face of Necurs: Noteworthy Changes to Necurs’ Behaviors

Security Predictions for 2018

Business Process Compromise

Popular Posts

Stay Updated