Commodified Cybercrime Infrastructure: Exploring the Underground Services Market for Cybercriminals
Cybercriminal takeover
The server takeover is the earliest stage, where exposed assets are enumerated (i.e., via network scanners), accessed, and categorized by features (e.g., availability, bandwidth, and type of GPU)...
Securing Enterprise Security: How to Manage the New Generation of Access Control Devices
Trend Micro Research
Given the increasing use by enterprises of contactless security solutions, the security of the devices that themselves are meant to control access to premises should be of...
Lost in Translation
Translation makes it possible to exchange information across the globe, regardless of language differences. Translation plays a similar role in industrial internet of things (IIoT) environments where different devices,...
The Cybersecurity Blind Spots of Connected Cars
Technology has accelerated the pace in which vehicles provide mobility and convenience. Nowadays, it’s common for connected cars to let their users have instant access to navigation and traffic...
Inter skimming kit used in homoglyph attacks
Threat actors load credit card skimmers using a known phishing technique called homoglyph attacks.
As we continue to track web threats and credit card skimming in particular, we often...
Fuzzing Image Parsing in Windows, Part One: Color Profiles
Image parsing and rendering are basic features of any modern operating system (OS). Image parsing is an easily accessible attack surface, and a vulnerability that may lead to remote code...
Release the Kraken: Fileless injection into Windows Error Reporting service
We discovered a new attack that injected its payload—dubbed "Kraken—into the Windows Error Reporting (WER) service as a defense evasion mechanism.
This blog post was authored by Hossein Jazi...
Detecting Microsoft 365 and Azure Active Directory Backdoors
Mandiant has seen an uptick in incidents involving Microsoft 365 (M365) and Azure Active Directory (Azure AD). Most of these incidents are the result of a phishing email coercing...
Chaos in a cup: When ransomware creeps into your smart coffee maker
This International Coffee Day, we looked at coffee machines that helped bring down a network of systems. Who would've guessed?
When the fledgling concept of the Internet of...
VideoBytes: Ransomware gets wasted!
On today's VideoBytes, we look at how ransomware is on the rise, attacking corporations with malware that not only encrypts files, but also steals it.
Hello dear readers, and...
