• Trend Micro
  • About TrendLabs Security Intelligence Blog
Search:
  • Home
  • Categories
    • Ransomware
    • Vulnerabilities
    • Exploits
    • Targeted Attacks
    • Deep Web
    • Mobile
    • Internet of Things
    • Malware
    • Bad Sites
    • Spam
    • Botnets
    • Social
    • Open source
Home   »   Archives for September 2014

National Cybersecurity Awareness Month: How Do Users Become Victims?

  • Posted on:September 30, 2014 at 6:32 pm
  • Posted in:Social
  • Author:
    Ryan Certeza (Technical Communications)
0

Cybersecurity is an important part of our daily lives, whether people are aware of it or not. Building awareness that being secure online is everyone’s responsibility is a key part of fighting cybercrime. This is why one of the themes of this year’s National Cyber Security Awareness Month is the  ‘Stop. Think. Connect™’ campaign, which promotes…

Read More
Tags: infection vectorsNational Cybersecurity Awareness MonthNCSAMSpamweb threats

Same Origin Policy Bypass Vulnerability Has Wider Reach Than Thought

  • Posted on:September 29, 2014 at 10:04 pm
  • Posted in:Mobile, Vulnerabilities
  • Author:
    Simon Huang (Mobile Security Engineer)
0

Independent security researcher Rafay Baloch recently disclosed a serious vulnerability in Android’s built-in browser. The vulnerability allows the same origin policy of the browser to be violated. This could allow a dangerous universal cross-site scripting (UXSS) attack to take place. An attacker could potentially use an IFRAME to load a legitimate site for which the…

Read More
Tags: androidAOSPbrowsermobile vulnerabilityvulnerability

Summary of Shellshock-Related Stories and Materials

  • Posted on:September 29, 2014 at 1:09 am
  • Posted in:Malware, Vulnerabilities
  • Author:
    Trend Micro
0

Our coverage on the Bash bug vulnerability (more popularly known as “Shellshock”) continues as we spot new developments on Shellshock-related threats and attacks. Here is a list of our stories related to this threat: Shellshock: A Technical Report – this technical brief describes the vulnerability in detail, as well as outlying which platforms are affected….

Read More
Tags: bash bug vulnerabilityBash vulnerabilityBASHLITEExploitshellshockvulnerability

Shellshock Exploit Attempts Continue in China

  • Posted on:September 28, 2014 at 6:27 am
  • Posted in:Exploits, Vulnerabilities
  • Author:
    Trend Micro
2

It seems like the floodgates have truly opened for Shellshock-related attacks. We have reported on different attacks leveraging the Bash bug vulnerability, ranging from botnet attacks to IRC bots. We have also mentioned that we spotted Shellshock exploit attempts in Brazil. It appears that these attempts were not limited to that country alone. We saw…

Read More
Tags: bashbash bugbash bug vulnerabilityExploitIRC botIRC channelIRC servershellshock

Shellshock Continues to Make Waves with Active IRC Bot

  • Posted on:September 27, 2014 at 2:31 pm
  • Posted in:Malware, Vulnerabilities
  • Author:
    Trend Micro
0

Given the severity of the Bash vulnerability, also known as Shellshock, it is no wonder that we’re seeing a lot of attacks leveraging this. Just hours after this vulnerability was reported, malware payload such as ELF_BASHLITE.A emerged in the threat landscape. Other payload like PERL_SHELLBOT.WZ and ELF_BASHLET.A were also spotted in the wild, which have capabilities to…

Read More
Tags: bashbash bug vulnerabilityIRC botIRC channelIRC servershellshock
Page 1 of 812 › »

Security Predictions for 2020

  • Cybersecurity in 2020 will be viewed through many lenses — from differing attacker motivations and cybercriminal arsenal to technological developments and global threat intelligence — only so defenders can keep up with the broad range of threats.
    Read our security predictions for 2020.

Business Process Compromise

  • Attackers are starting to invest in long-term operations that target specific processes enterprises rely on. They scout for vulnerable practices, susceptible systems and operational loopholes that they can leverage or abuse. To learn more, read our Security 101: Business Process Compromise.

Popular Posts

Sorry. No data so far.

Stay Updated

  • Home and Home Office
  • |
  • For Business
  • |
  • Security Intelligence
  • |
  • About Trend Micro
  • Asia Pacific Region (APAC): Australia / New Zealand, 中国, 日本, 대한민국, 台灣
  • Latin America Region (LAR): Brasil, México
  • North America Region (NABU): United States, Canada
  • Europe, Middle East, & Africa Region (EMEA): France, Deutschland / Österreich / Schweiz, Italia, Россия, España, United Kingdom / Ireland
  • Privacy Statement
  • Legal Policies
  • Copyright © Trend Micro Incorporated. All rights reserved.