Research, News, and Perspectives

Malware

Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign

Cybercriminals hijacked Google Ads searches for popular AI developer tools to funnel over 2,000 victims towards malicious download pages before quietly moving their operation onto claude.ai's own platform, turning the trusted domain into a delivery mechanism for credential-stealing malware.

Governing Claude Enterprise in Environments Where Inline Controls Can't Go

TrendAI™ integrates the Claude Compliance API into TrendAI Vision One™ through two collectors that bring AI-aware visibility and detection to Claude Enterprise usage: one keeps all data inside the environment, while the other feeds TrendAI Vision One™ for deeper correlation and compliance.

Jun 12, 2026

Artificial Intelligence (AI)

GenAI Is Both Hunter and Hunted at Pwn2Own Berlin 2026

This year’s Pwn2Own competition in Berlin revealed just how much of the AI stack remains exposed -- and the gap between what these tools promise and what they can withstand points to the fragile security foundations underneath.

Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open

Two separate Russia-aligned campaigns are still exploiting the WinRAR flaw CVE-2025-8088 against Ukrainian organisations nearly a year after it was patched, showing how unmanaged software keeps an exploited entry point open long after the fix ships.

Research Jun 08, 2026

Exploits & Vulnerabilities

Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet

47 zero-days fell at Pwn2Own Berlin 2026 for US$1,298,250 in payouts. TrendAI™ was on the ground all three days — here's what we saw.

Making Cyber Risk Measurable: Why Risk Assessment and Compliance Must Go Hand in Hand

Today, most organizations already have a broad range of modern security solutions in place, yet many still struggle with a lack of meaningful visibility. The challenge is no longer collecting more security data.

Expert Perspective May 27, 2026

Cyber Crime

Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet

TrendAI™ Research analysed an intrusion where threat actors used the EtherHiding technique to route ClearFake payload delivery through smart contracts on the BNB Smart Chain testnet. The attack chain ended with two simultaneously deployed stealers, SectopRAT and ACRStealer alongside an on-chain execution tracker that confirmed each victim compromise in real time.

Analysing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware

Void Dokkaebi, a North Korea-aligned intrusion set, has updated its information-stealing malware, InvisibleFerret, shifting its delivery format to evade script-based detections.

Research May 22, 2026

Cyber Crime

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign

A solo Russian-speaking threat actor ran a 5-year Telegram channel and, starting September 2025, used AI to automate its content, credential theft, and a cryptocurrency fraud scheme targeting American audiences.

Research May 21, 2026

Cyber Threats

Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud

In this blog entry, researchers from the TrendAI™ MDR team discuss how they mapped the full end-to-end operation of SHADOW-WATER-063’s Banana RAT banking malware by analysing server-side artefacts and victim-side data.

Research, News, and Perspectives

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign

Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign

Governing Claude Enterprise in Environments Where Inline Controls Can't Go

GenAI Is Both Hunter and Hunted at Pwn2Own Berlin 2026

Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open

Pwn2Own Berlin 2026: On the Ground With TrendAI™ ZDI's Biggest AI Showdown Yet

Making Cyber Risk Measurable: Why Risk Assessment and Compliance Must Go Hand in Hand

Smart Contracts for C&C: How ClearFake Hid in Plain Sight on BSC Testnet

Analysing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign

Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud

Trend Vision One™ - Proactive Security Starts Here.

Resources

Support

About Trend

Country Headquarters

Research, News, and Perspectives

Trending Topics

Trend Vision One™ - Proactive Security Starts Here.

Resources

Support

About Trend

Country Headquarters