2017年9月30日 星期六

TrendLabs: ATM Malware Attacks

Figure 1. How a typical network-based ATM malware attack is carried out
Figure 1. How a typical network-based ATM malware attack is carried out
REF: http://blog.trendmicro.com/trendlabs-security-intelligence/an-elaborate-atm-threat-crops-up-network-based-atm-malware-attacks/

Security.txt Standard Proposed, Similar to Robots.txt

According to the current IETF draft, website owners would be able to create security.txt files that look like this:
#This is a comment
Contact: security@example.com
Contact: +1-201-555-0123
Contact: https://example.com/security
Encryption: https://example.com/pgp-key.txt
Acknowledgement: https://example.com/acknowledgements.html
Disclosure: Full

REF: https://www.bleepingcomputer.com/news/security/security-txt-standard-proposed-similar-to-robots-txt/

TrendLabs: Tech Support Scams


Figure 2: Country distribution of EITest’s tech support scam

REF: http://blog.trendmicro.com/trendlabs-security-intelligence/eitest-campaign-uses-tech-support-scams-deliver-coinhives-monero-miner/

Why support doesn't end at software with ResourceSpace



REF:

2017年9月26日 星期二

TrendLabs: The Apache HTTP Server Now Bleeds

Figure 3. Memory leak resulting from a misconfigured .htaccess file
REF: http://blog.trendmicro.com/trendlabs-security-intelligence/optionsbleed-apache-http-server-now-bleeds/

GCP: Expanding Kubernetes in the enterprise


vmware-pivotal-google-cloud

Google Container Engine + Pivotal Container Service

REF: https://www.blog.google/topics/google-cloud/vmware-and-pivotal-launch-new-hybrid-kubernetes-solution-optimized-gcp/

2017年9月24日 星期日

TrendLabs: Spam Campaigns Upgraded

Figure 3 heatmap
Figure 3. Distribution of second spam campaign 

REF: http://blog.trendmicro.com/trendlabs-security-intelligence/locky-ransomware-pushed-alongside-fakeglobe-upgraded-spam-campaigns/