Copyright Lures Mask a Multi‑Stage PureLog Stealer Attack on Key Industries
The infection begins when the victim manually executes a file disguised as a legal notice: Dokumentation über Verstöße gegen Rechte...
Trend Micro Research : Articles, News, Reports
Why East-West Visibility Matters for Grid Security
Electric power infrastructure is becoming more connected than ever before. Organizations responsible for operating the Bulk Electric System (BES) are...
TrendAI™ Supports Global Law Enforcement Efforts
Serious fraud and cybercrime know no boundaries — jurisdictional or otherwise. Criminal gangs operate with impunity across borders, often leaving...
Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack
Following initial access, the threat actors conducted extensive lateral movement using a combination of legitimate administration tools and credential abuse....
Through the Lens of MDR: Analysis of KongTuke’s ClickFix Abuse of Compromised WordPress Sites
While the execution of the bytecode was not successful in our tests, we saw that it contains strings and a...
CISOs in a Pinch: A Security Analysis of OpenClaw
The viral rise of OpenClaw (formerly Clawdbot) marks the end of the "chatbot" era and the beginning of the "sovereign...
![TrendAI™ at [un]prompted 2026: From KYC Exploits to Agentic Defense](https://www.trendmicro.com/content/dam/trendmicro/global/en/research/thumbnails/26/unprompted-976-2.png)
TrendAI™ at [un]prompted 2026: From KYC Exploits to Agentic Defense
The sessions from Sean Park and Peter Girnus with Demeng Chen captured the attention of attendees because they painted a...
New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages
New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages | Trend Micro (US) Content has been added to your...
Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations
The operations of phishing-as-a-service (PhaaS) platform Tycoon 2FA was taken offline this week by the combined effort of law enforcement that includes Europol and other partner agencies, as well...
CISOs in a Pinch: A Security Analysis of OpenClaw
Anthropic's Claude Code Security is a legitimate leap forward for pre-deployment vulnerability detection - and the market sell-off (Cybersecurity ETF...
Malicious OpenClaw Skills Used to Distribute Atomic MacOS Stealer
Key takeaways Atomic (AMOS) Stealer has evolved from being distributed via cracked software to a more sophisticated supply chain attack...
Spam Campaign Abuses Atlassian Jira, Targets Government and Corporate Entities
Key takeaways Attackers abused Atlassian Cloud’s trusted domain for a spate of spam campaigns. The campaigns tried to leverage the...
U.S. Public Sector Under Siege
The convergence of digital transformation and evolving threat landscapes has placed US government agencies and educational institutions on the frontlines...
Embracing Choice in Cybersecurity: TrendAI Vision One™ and SentinelOne Integration
Endpoint Choice, Centralized Risk Clarity Modern security environments rarely rely on a single technology stack. Organizations need the ability to...
Pwn2Own: Researchers Earn $1 Million for 76 Zero-Days
Discovering critical vulnerabilities across connected vehicles, EV chargers, and automotive systems As connected cars proliferate worldwide, data security for vehicles...
