Trend Micro · PDF
Below the Surface: Exploring the Deep Web
Excerpt
Dr. Vincenzo Ciancaglini, Dr. Marco Balduzzi, Robert McArdle, and Martin Rösler Forward-Looking Threat Research Team
A TrendLabsSM Research Paper
TREND MICRO LEGAL DISCLAIMER
The information provided herein is for general Contents
information and educational purposes only. It is not
intended and should not be construed to constitute
legal advice. The information contained herein may
not be applicable to all situations and may not reflect
the most current situation. Nothing contained herein
should be relied on or acted upon without the benefit
of legal advice based on the particular facts and
circumstances presented and nothing herein should
be construed otherwise. Trend Micro reserves the
right to modify the contents of this documen…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Trend Micro on documents.trendmicro.com.
Mentioned in the excerpt1
More from Trend Micro20
Trend Micro · Web page · Added 30 Oct
Earth Sirrush: A Russia-Aligned Intrusion Set With 4 Years of Evolving Espionage Tooling
Since at least 2022, the Russia-aligned intrusion set tracked by TrendAI™ Research as Earth Sirrush — previously tracked as SHADOW-EARTH-065, overlapping with the UAC-0099 designation by the Computer Emergency Response Team of Ukraine (CERT-UA) — has…
Trend Micro · Web page · Published 17 May
Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices
Note: This group's name is a generic identification based on components found during our investigation, and it might be used by other legitimately registered companies that legally render services and products. The illicit entity "Lemon Group" identified here…
Trend Micro · Web page · Added 14 Oct
Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed
In August 2025, we investigated a new ransomware campaign orchestrated by The Gentlemen, an emerging and previously undocumented threat group. This threat actor quickly established itself within the threat landscape by demonstrating advanced capabilities…
Trend Micro · Web page · Added 2 Sep
Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant
RedC2 extends its control layer with an AI-driven component called Red post-exploitation tasks, from network reconnaissance to credential dumping, using natu