• Trend Micro
  • About TrendLabs Security Intelligence Blog
Search:
  • Home
  • Categories
    • Ransomware
    • Vulnerabilities
    • Exploits
    • Targeted Attacks
    • Deep Web
    • Mobile
    • Internet of Things
    • Malware
    • Bad Sites
    • Spam
    • Botnets
    • Social
    • Open source
Home   »   Archives for September 2013

Mobile Malware, High-Risk Apps Hit 1M Mark

  • Posted on:September 30, 2013 at 11:29 am
  • Posted in:Mobile
  • Author:
    Gelo Abendan (Technical Communications)
8

Note: Some of the apps discussed in this blog entry were developed with an older adware SDK that did not contain opt-in provisions, particularly regarding the ability to collect information and display ads outside of the original app. The adware SDK has since been updated to this capability to comply with Google’s developer policies; apps…

Read More
Tags: adwareandroidmalicious appsmobile devicemobile malwaremobile securitypremium service abusers

The Ghost in the (Portable) Machine: Securing Mobile Banking

  • Posted on:September 29, 2013 at 11:58 pm
  • Posted in:Mobile
  • Author:
    Abigail Pichel (Technical Communications)
0

Online banking is one of the many tasks that have been made more convenient by mobile technology. Now, users can purchase products and/or services, pay their bills and manage their finances from anywhere, and anytime. However, there are threats against mobile banking exist, which need to be addressed and secured against. Some of these threats…

Read More
Tags: androidMobilemobile bankingmobile threatsphishing

ARP Spoofing and Lateral Movement

  • Posted on:September 27, 2013 at 3:08 am
  • Posted in:Malware, Targeted Attacks
  • Author:
    Spencer Hsieh (Threat Researcher)
0

In targeted attacks, during the lateral movement stage attacks try to gain access to other computers on the same local area network (LAN). One useful tool to achieve this is ARP spoofing, which can be used to carry out a variety of attacks to steal information as well as plant backdoors on other machines. We…

Read More
Tags: APTARP spoofinglateral movementtargeted attacks

Paying for Social Media

  • Posted on:September 25, 2013 at 7:06 am
  • Posted in:Social
  • Author:
    Jonathan Leopando (Technical Communications)
0

There is one truly remarkable aspect about the social media services that people take for granted: they don’t ask their users for anything. You can talk with as many friends, take as many selfies, post as many status messages, all without paying anything. That may be true at face value, but that’s not really true….

Read More
Tags: adsdataFacebookfreeprivacysocial mediasocial network

Data Exfiltration in Targeted Attacks

  • Posted on:September 23, 2013 at 2:10 am
  • Posted in:Targeted Attacks
  • Author:
    Macky Cruz (Technical Communications)
0

Data exfiltration is the unauthorized transfer of sensitive information from a target’s network to a location which a threat actor controls. Because data routinely moves in and out of networked enterprises, data exfiltration can closely resemble normal network traffic, making detection of exfiltration attempts challenging for IT security groups. Figure 1. Targeted Attack Campaign Diagram…

Read More
Tags: APTdata exfiltrationdata leakEvilGrabsecurity breachtargeted attacks
Page 1 of 512 › »

Security Predictions for 2019

  • Our security predictions for 2019 are based on our experts’ analysis of the progress of current and emerging technologies, user behavior, and market trends, and their impact on the threat landscape. We have categorized them according to the main areas that are likely to be affected, given the sprawling nature of the technological and sociopolitical changes under consideration.
    Read our security predictions for 2019.

Business Process Compromise

  • Attackers are starting to invest in long-term operations that target specific processes enterprises rely on. They scout for vulnerable practices, susceptible systems and operational loopholes that they can leverage or abuse. To learn more, read our Security 101: Business Process Compromise.

Popular Posts

  • Going In-depth with Emotet: Multilayer Operating Mechanisms
  • February Patch Tuesday: Batch Includes 77 Updates That Cover Flaws in Internet Explorer, Exchange Server, and DHCP Server
  • Various Google Play ‘Beauty Camera’ Apps Send Users Pornographic Content, Redirect Them to Phishing Websites and Collect Their Pictures
  • Linux Coin Miner Copied Scripts From KORKERDS, Removes All Other Malware and Miners
  • Trickbot Adds Remote Application Credential-Grabbing Capabilities to Its Repertoire

Stay Updated

  • Home and Home Office
  • |
  • For Business
  • |
  • Security Intelligence
  • |
  • About Trend Micro
  • Asia Pacific Region (APAC): Australia / New Zealand, 中国, 日本, 대한민국, 台灣
  • Latin America Region (LAR): Brasil, México
  • North America Region (NABU): United States, Canada
  • Europe, Middle East, & Africa Region (EMEA): France, Deutschland / Österreich / Schweiz, Italia, Россия, España, United Kingdom / Ireland
  • Privacy Statement
  • Legal Policies
  • Copyright © Trend Micro Incorporated. All rights reserved.