• Trend Micro
  • About TrendLabs Security Intelligence Blog
Search:
  • Home
  • Categories
    • Ransomware
    • Vulnerabilities
    • Exploits
    • Targeted Attacks
    • Deep Web
    • Mobile
    • Internet of Things
    • Malware
    • Bad Sites
    • Spam
    • Botnets
    • Social
    • Open source
Home   »   Targeted Attacks

Water Nue Phishing Campaign Targets C-Suite’s Office 365 Accounts

  • Posted on:August 6, 2020 at 5:02 am
  • Posted in:Cloud, Targeted Attacks
  • Author:
    Trend Micro
0

A series of ongoing business email compromise (BEC) campaigns that uses spear-phishing schemes on Office 365 accounts has been seen targeting business executives of over 1,000 companies across the world since March 2020. The recent campaigns target senior positions in the United States and Canada.

The fraudsters, whom we named “Water Nue,” primarily target accounts of financial executives to obtain credentials for further financial fraud. The phishing emails redirect users to fake Office 365 login pages. Once the credentials are obtained and accounts are successfully compromised, emails containing invoice documents with tampered banking information are sent to subordinates in an attempt to siphon money through fund transfer requests.

Read More
Tags: business email compromisecredential phishingemail fraudoffice 365phishing

Tropic Trooper’s Back: USBferry Attack Targets Air-gapped Environments

  • Posted on:May 12, 2020 at 5:18 am
  • Posted in:Malware, Targeted Attacks
  • Author:
    Trend Micro
0

We found that Tropic Trooper’s latest activities center on targeting Taiwanese and the Philippine military’s physically isolated networks through a USBferry attack. We also observed targets among military/navy agencies, government institutions, military hospitals, and even a national bank. The group employs USBferry, a USB malware that performs different commands on specific targets, maintains stealth in environments, and steals critical data through USB storage. We started tracking this particular campaign in 2018, and our analysis shows that it uses a fake executable decoy and a USB trojan strategy to steal information.

Read More
Tags: cyberespionageKeyBoymilitaryUSBUSBferry

Gamaredon APT Group Use Covid-19 Lure in Campaigns

  • Posted on:April 17, 2020 at 5:12 am
  • Posted in:Malware, Spam, Targeted Attacks
  • Author:
    Trend Micro
0

In March, we came across an email with a malware attachment that used the Gamaredon group’s tactics. Some of the emails used the coronavirus pandemic as a topic to lure victims into opening emails and attachments.

Read More
Tags: APT

Outlaw Updates Kit to Kill Older Miner Versions, Targets More Systems

  • Posted on:February 10, 2020 at 1:00 pm
  • Posted in:Bad Sites, Exploits, Malware, Targeted Attacks, Vulnerabilities
  • Author:
    Trend Micro
0

We observed an increase in hacking group Outlaw’s activities in December, with updates on the kits’ capabilities reminiscent of their previous attacks.

Read More
Tags: ExploitshackingminerMoneroOutlaw

More than a Dozen Obfuscated APT33 Botnets Used for Extreme Narrow Targeting

  • Posted on:December 12, 2019 at 8:00 am
  • Posted in:Botnets, Targeted Attacks
  • Author:
    Trend Micro
0

The threat group APT33 is known to target the oil and aviation industries aggressively. Our recent findings show that the group uses about a dozen live Command and Control (C&C) servers for extremely narrow targeted malware campaigns against organizations in the Middle East, the U.S., and Asia.

Read More
Tags: APTAPT33botnetphishingVPN
Page 1 of 6112 › »

Security Predictions for 2020

  • Cybersecurity in 2020 will be viewed through many lenses — from differing attacker motivations and cybercriminal arsenal to technological developments and global threat intelligence — only so defenders can keep up with the broad range of threats.
    Read our security predictions for 2020.

Business Process Compromise

  • Attackers are starting to invest in long-term operations that target specific processes enterprises rely on. They scout for vulnerable practices, susceptible systems and operational loopholes that they can leverage or abuse. To learn more, read our Security 101: Business Process Compromise.

Popular Posts

Sorry. No data so far.

Stay Updated

  • Home and Home Office
  • |
  • For Business
  • |
  • Security Intelligence
  • |
  • About Trend Micro
  • Asia Pacific Region (APAC): Australia / New Zealand, 中国, 日本, 대한민국, 台灣
  • Latin America Region (LAR): Brasil, México
  • North America Region (NABU): United States, Canada
  • Europe, Middle East, & Africa Region (EMEA): France, Deutschland / Österreich / Schweiz, Italia, Россия, España, United Kingdom / Ireland
  • Privacy Statement
  • Legal Policies
  • Copyright © Trend Micro Incorporated. All rights reserved.