Trend Micro Inc. is an American-Japanese cyber security software company. The company has globally dispersed R&D in 16 locations across every continent excluding Antarctica. From Wikipedia
Researchers link the spree to SharePoint ToolShell flaws enabling webshell uploads, rapid lateral movement, exfiltration, then a LockBit‑derived locker.