---
id: 9192
title: "Who Scans the Scanner? Exploiting Trend Micro Mobile Security"
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/who-scans-the-scanner-exploiting-trend-micro-mobile-security/"
published_at: "2025-09-05T14:00:00Z"
tags: ["vulnerability-research", "xss", "research"]
phying_url: "https://phying.com/item/9192"
lang: en
---

# Who Scans the Scanner? Exploiting Trend Micro Mobile Security

## Summary

Abstract Trend Micro Mobile Security (TMMS) is widely deployed to protect Android fleets. This research shows how an attacker can subvert that trust. We uncovered three Trend Micro Mobile Security vulnerabilities: (1) unauthenticated access to device security reports, exposing app inventories, scan histories, and policy status; (2) a persistent stored XSS injected via Android agent […]

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **Published:** 2025-09-05T14:00:00Z
- **Original:** https://yokai.hakaisecurity.io/who-scans-the-scanner-exploiting-trend-micro-mobile-security/
- **Phying News:** https://phying.com/item/9192