Cyber Threat Trends

First reported date: 2020/09/22
Inquiry period : 2025/05/05 20:26 ~ 2025/05/06 20:26 (1 days), 2 search results

지난 7일 기간대비 신규 트렌드를 보이고 있습니다.
악성코드 유형 BlackCat Ransomware WannaCry PlugX LockBit BlackSuit ShadowPad RedCurl WannaCryptor BianLian 도 새롭게 확인됩니다.
공격기술 Campaign Phishing Social Engineering 도 새롭게 확인됩니다.
기관 및 기업 United States Microsoft India Australia United Kingdom Canada ESET Google China Taiwan Paloalto Fortinet Check Point 도 새롭게 확인됩니다.
기타 EDR Victim Malware Vulnerability Report 등 신규 키워드도 확인됩니다.

ALPHV, also known as BlackCat or Noberus, is a ransomware family that is deployed as part of Ransomware as a Service (RaaS) operations. ALPHV is written in the Rust programming language and supports execution on Windows, Linux-based operating systems (Debian, Ubuntu, ReadyNAS, Synology), and VMWare ESXi. ALPHV is marketed as ALPHV on cybercrime forums, but is commonly called BlackCat by security researchers due to an icon of a black cat appearing on its leak site. ALPHV has been observed being deployed in ransomware attacks since November 18, 2021.

ALPHV can be configured to encrypt files using either the AES or ChaCha20 algorithms. In order to maximize the amount of ransomed data, ALPHV can delete volume shadow copies, stop processes and services, and stop virtual machines on ESXi servers. ALPHV can self-propagate by using PsExec to remote execute itself on other hosts on the local network.  Ref.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/05/06 Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines
    ㆍ 2025/05/06 Ransomware Tool Matrix Project Updates: May 2025


참고로 동일한 그룹의 악성코드 타입은 WannaCry Sodinokibi Phobos 등 79개 종이 확인됩니다.