Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1124011" data-attributes="member: 99014">I’ve noticed some patterns are now much more frequently updated than before.In the past, patterns related to behavioural blocking would be updated every now and then, now, Threat Behaviour Tracing Pattern receives pretty much daily updates (at least so far). The Smart Scan Server pattern used to receive one update daily, now it’s few updates. Other patterns like Advanced Threat Correlation Pattern seem to be updated more often as well. Looking at the patterns content, Trend Micro seems to use much more heuristics than before (they start with possible_) and seems to have broadened the coverage, now detecting also html phishing and other nasties.It’s possible that a change of management may have happened.From the last smart scan agent pattern:Backdoor.Win64.KRUSTYLOADER.SMYXFDWYZHG_PSSHELL.SM1Possible_SMSILENTPRISMYXFCRRansom.PS1.NUMEC.SMYXFDNTrojan.HTML.REDIRECTOR.SMTPTVLNTTrojan.PS1.ENCRYPTRAT.SMYXFCWTrojan.PS1.KILLPROC.SMYXFCVTrojan.PS1.RHADAMANTHYS.SMYXFCGTrojan.PS1.STEALC.SMYXFCRTrojan.VBS.DOWNLOADER.SMTRXVLNTTrojan.Win32.GOLANGGHOST.CRCATrojan.Win32.GOLANGGHOST.CRCBTrojanSpy.PS1.FICKLESHADE.SMYXFCD-A[SPOILER=&quot;Photo&quot;][ATTACH=full]288299[/ATTACH][/SPOILER]</blockquote>

[QUOTE="Trident, post: 1124011, member: 99014"] I’ve noticed some patterns are now much more frequently updated than before. In the past, patterns related to behavioural blocking would be updated every now and then, now, Threat Behaviour Tracing Pattern receives pretty much daily updates (at least so far). The Smart Scan [B]Server[/B] pattern used to receive one update daily, now it’s few updates. Other patterns like Advanced Threat Correlation Pattern seem to be updated more often as well. Looking at the patterns content, Trend Micro seems to use much more heuristics than before (they start with possible_) and seems to have broadened the coverage, now detecting also html phishing and other nasties. It’s possible that a change of management may have happened. From the last smart scan agent pattern: Backdoor.Win64.KRUSTYLOADER.SMYXFDWYZ HG_PSSHELL.SM1 Possible_SMSILENTPRISMYXFCR Ransom.PS1.NUMEC.SMYXFDN Trojan.HTML.REDIRECTOR.SMTPTVLNT Trojan.PS1.ENCRYPTRAT.SMYXFCW Trojan.PS1.KILLPROC.SMYXFCV Trojan.PS1.RHADAMANTHYS.SMYXFCG Trojan.PS1.STEALC.SMYXFCR Trojan.VBS.DOWNLOADER.SMTRXVLNT Trojan.Win32.GOLANGGHOST.CRCA Trojan.Win32.GOLANGGHOST.CRCB TrojanSpy.PS1.FICKLESHADE.SMYXFCD-A [SPOILER="Photo"] [ATTACH type="full" width="204px" alt="IMG_1628.jpeg"]288299[/ATTACH] [/SPOILER] [/QUOTE]

Verification