Cyber Threat Trends

Summary: 2025/04/17 16:44

First reported date: 2009/07/08
Inquiry period : 2025/03/18 16:44 ~ 2025/04/17 16:44 (1 months), 294 search results

전 기간대비 상승한 Top5 연관 키워드는 Malware Exploit Update Vulnerability Report 입니다.

* 최근 뉴스기사 Top3:
    ㆍ 2025/04/17 Hi, robot: Half of all internet traffic now automated
    ㆍ 2025/04/17 Exploiting SMS: Threat Actors Use Social Engineering to Target Companies
    ㆍ 2025/04/17 6,000 WordPress Sites Affected by Arbitrary File Move Vulnerability in Drag and Drop Multiple File Upload for WooCommerce WordPress Plugin

Date range button:

First seen:

Last seen:

Keyword

Trend graph by period

Related keyword cloud

Top 100

#	Trend	Count	Comparison
1	Malware	198	▲ 7 (4%)
2	Exploit	133	▲ 6 (5%)
3	Update	121	▲ 22 (18%)
4	Vulnerability	114	▲ 22 (19%)
5	Report	107	▲ 5 (5%)
6	attack	107	▼ -16 (-15%)
7	Campaign	87	▼ -6 (-7%)
8	target	87	▼ -5 (-6%)
9	United States	71	▲ 13 (18%)
10	Advertising	69	▲ 6 (9%)
11	Remote Code Execution	68	▼ -18 (-26%)
12	Phishing	68	▼ -7 (-10%)
13	Victim	67	▼ -7 (-10%)
14	Software	65	▲ 5 (8%)
15	Windows	63	▼ -5 (-8%)
16	intelligence	61	▼ -4 (-7%)
17	Microsoft	59	▲ 2 (3%)
18	Email	54	▼ -2 (-4%)
19	Operation	47	▼ -1 (-2%)
20	Criminal	41	▼ -20 (-49%)
21	Ransomware	40	▼ -7 (-18%)
22	IoC	40	▼ -3 (-8%)
23	c&c	39	▲ 12 (31%)
24	Kaspersky	38	▲ 8 (21%)
25	Russia	32	▲ 8 (25%)
26	CVSS	32	▲ 18 (56%)
27	Google	30	▼ -3 (-10%)
28	GitHub	30	▲ 8 (27%)
29	Password	29	▲ 3 (10%)
30	powershell	27	▲ 2 (7%)
31	CVE	27	▲ 8 (30%)
32	China	27	▲ 3 (11%)
33	Browser	27	▲ 3 (11%)
34	Backdoor	26	▼ -5 (-19%)
35	Education	25	▼ -13 (-52%)
36	threat	24	▲ 9 (38%)
37	RCE	24	▲ 21 (88%)
38	ZeroDay	24	- 0 (0%)
39	Stealer	24	▼ -12 (-50%)
40	Java	23	▲ 4 (17%)
41	NetWireRC	22	▼ -4 (-18%)
42	Distribution	22	▼ -8 (-36%)
43	Supply chain	21	▲ 7 (33%)
44	Trojan	20	▲ 2 (10%)
45	MFA	20	▼ -15 (-75%)
46	hijack	19	▲ 7 (37%)
47	GameoverP2P	19	▲ 2 (11%)
48	Cryptocurrency	18	▼ -6 (-33%)
49	Government	18	▼ -11 (-61%)
50	Android	18	▲ 7 (39%)
51	Twitter	18	▲ 3 (17%)
52	Linux	18	▼ -7 (-39%)
53	Social Engineering	17	▼ -7 (-41%)
54	LinkedIn	17	▲ 6 (35%)
55	malicious	17	▲ 4 (24%)
56	hacking	16	▼ -8 (-50%)
57	DarkWeb	16	▼ -1 (-6%)
58	North Korea	14	▲ 1 (7%)
59	Telegram	14	▲ 2 (14%)
60	Chrome	14	▲ 4 (29%)
61	ESET	14	▲ 4 (29%)
62	DNS	13	▲ 4 (31%)
63	CISA	13	▲ 1 (8%)
64	Critical	13	▲ 11 (85%)
65	EDR	13	▲ 2 (15%)
66	AI	12	▲ 1 (8%)
67	Flaw	12	▲ 11 (92%)
68	Vawtrak	12	▲ 3 (25%)
69	RATel	12	▼ -1 (-8%)
70	Cobalt Strike	12	▼ -3 (-25%)
71	Code	11	▲ 1 (9%)
72	DYEPACK	10	▼ -1 (-10%)
73	ChatGPT	10	▲ 2 (20%)
74	plugin	10	▲ 5 (50%)
75	file	10	▲ 5 (50%)
76	MWNEWS	10	▲ 2 (20%)
77	YouTube	10	▲ 3 (30%)
78	VPN	10	▼ -3 (-30%)
79	Cisco	10	▼ -10 (-100%)
80	access	9	▼ -6 (-67%)
81	Japan	9	- 0 (0%)
82	Fortinet	9	▲ 7 (78%)
83	Germany	9	▲ 2 (22%)
84	DDoS	9	▼ -3 (-33%)
85	India	9	▲ 2 (22%)
86	Banking	9	- 0 (0%)
87	Zero Trust	8	▼ -1 (-13%)
88	Ucraina	8	▲ 1 (13%)
89	WordPress	8	▲ 2 (25%)
90	Check Point	8	▼ -3 (-38%)
91	Australia	8	▼ -1 (-13%)
92	RAT	8	▼ -7 (-88%)
93	VBScript	8	▼ -1 (-13%)
94	PoC	8	- 0 (0%)
95	Firmware	8	▲ 6 (75%)
96	Takedown	8	▼ -5 (-63%)
97	WMI	7	▲ 5 (71%)
98	VirusTotal	7	▼ -5 (-71%)
99	WhatsApp	7	▲ 3 (43%)
100	Downloader	7	▲ 6 (86%)

Special keyword group

Top 5

Malware Type

This is the type of malware that is becoming an issue.

Keyword	Average	Label
Ransomware		40 (26.8%)
NetWireRC		22 (14.8%)
Trojan		20 (13.4%)
GameoverP2P		19 (12.8%)
Vawtrak		12 (8.1%)

Attacker & Actors

The status of the attacker or attack group being issued.

Keyword	Average	Label

Technique

This is an attack technique that is becoming an issue.

Keyword	Average	Label
Exploit		133 (26.3%)
Campaign		87 (17.2%)
Remote Code Execution		68 (13.5%)
Phishing		68 (13.5%)
Backdoor		26 (5.1%)

Country & Company

This is a country or company that is an issue.

Keyword	Average	Label
United States		71 (16.8%)
Microsoft		59 (13.9%)
Kaspersky		38 (9%)
Russia		32 (7.6%)
Google		30 (7.1%)

Threat info

Last 5

SNS

(Total : 74)

Total keyword

Attacker Vulnerability Exploit Malware Update CVE attack Report Campaign Email Phishing CVSS Fortinet Password Windows Kaspersky GitHub target hacking Russia ZeroDay North Korea Google powershell hijack Microsoft AhnLab Ransomware CISA Criminal VBScript Rhadamanthys DCRat NetWireRC Advertising Hijacking Remote Code Execution plugin Cryptocurrency WhatsApp Proofpoint Trojan ...

No	Title	Date
1	The Hacker News @TheHackersNews ???? Actively Exploited SonicWall Flaw Hits CISA’s KEV List. Remote attackers can execute code via SMA 100 Series bug (CVE-2021-20035, CVSS 7.2). ➡️ Injects OS commands as ‘nobody’ user ➡️ Impacts SMA 200–500v on outdated firmware ➡️ FCEB agencies must patch by May 7, 2025 Your https://t.co/U3Xbw	2025.04.17
2	Cyber_OSINT @Cyber_O51NT A vulnerability, CVE-2025-24054, related to NTLM hash disclosure via spoofing has been actively exploited since March 19, 2025, allowing attackers to leak user passwords, despite a patch released just days earlier. #CyberSecurity #NTLM https://t.co/89kUTVNtR6	2025.04.17
3	The Hacker News @TheHackersNews ???? One task away from total takeover? 4 local privilege escalation flaws found in schtasks.exe—a core part of Windows Task Scheduler. Attackers can: • Bypass UAC • Run SYSTEM-level commands • Erase security logs • Impersonate admins using known passwords. Fix not yet https://t.co/jtm4oCZbNC	2025.04.16
4	Kaspersky @kaspersky Discover how attackers use the polyglot technique to hide malware in a seemingly harmless file ???? https://t.co/KVoBquc60H https://t.co/mmF5DVrlvk	2025.04.16
5	Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer ????CVE-2025-29471: Stored XSS PoC Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field. Credit: https://t.co/70CmkIBkSf https://t.co/IWoUeJzVIL	2025.04.15

News

(Total : 220)

Total keyword

Attacker Malware Exploit Update Report attack Vulnerability target Campaign United States Advertising Victim Remote Code Execution Software Phishing intelligence Windows Microsoft Email Operation IoC c&c Criminal Ransomware Kaspersky Russia Google Browser GitHub Backdoor China CVSS Education Stealer Password powershell RCE Java Distribution ZeroDay Supply chain NetWireRC GameoverP2P MFA Android Linux Twitter Trojan Government Social Engineering Cryptocurrency DarkWeb LinkedIn hijack Chrome Telegram CVE DNS ESET EDR hacking Cobalt Strike Vawtrak RATel CISA North Korea YouTube VPN DYEPACK Germany DDoS Cisco India Japan ChatGPT Banking plugin Zero Trust RAT Check Point Australia Ucraina Takedown VirusTotal Firmware Downloader Red Team WordPress Taiwan VMware United Kingdom PoC WMI Kubernetes ...

No	Title	Date
1	Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis - Unit 42	2025.04.17
2	Hi, robot: Half of all internet traffic now automated - Malware.News	2025.04.17
3	Exploiting SMS: Threat Actors Use Social Engineering to Target Companies - Malware.News	2025.04.17
4	6,000 WordPress Sites Affected by Arbitrary File Move Vulnerability in Drag and Drop Multiple File Upload for WooCommerce WordPress Plugin - Malware.News	2025.04.17
5	Experts Uncover Four New Privilege Escalation Flaws in Windows Task Scheduler - The Hacker News	2025.04.17

Additional information

No	Title	Date
1	엔디비아 'AI 심장부' GPU에 보안 구멍.. '즉시 패치' 비상 - 시큐리티팩트	2025.04.17
2	Hi, robot: Half of all internet traffic now automated - Malware.News	2025.04.17
3	Zoom Sees Outage With 50,000 Users Reporting Availability Issues - Bloomberg Technology	2025.04.17
4	Nude photos and names: KU Health and Kansas hospital sued for data breach - Malware.News	2025.04.17
5	DeepSeek Poses ‘Profound’ Security Threat, US House Panel Claims - Bloomberg Technology	2025.04.17
View only the last 5

No	Title	Date
1	Exploiting SMS: Threat Actors Use Social Engineering to Target Companies - Malware.News	2025.04.17
2	Wars without Gun Smoke: China Plays the Cyber Name-and-Shame Game on Taiwan and the U.S - Malware.News	2025.04.17
3	Latest Mustang Panda Arsenal: ToneShell and StarProxy \| P1 - Malware.News	2025.04.17
4	CVE-2025-24054, NTLM Exploit in the Wild - Malware.News	2025.04.16
5	CVE-2025-24054, NTLM Exploit in the Wild - Malware.News	2025.04.16
View only the last 5

No data

No	URL	CC	ASN Co	Reporter	Date
1	https://ama.resourcegate.lol/scar/attacker attacker	US	CLOUDFLARENET	abus3reports	2024.08.10
2	https://ama.cuisineupdates.online/scar/attacker attacker	US		abus3reports	2024.08.10
3	https://clp.resourcegate.lol/scar/attacker attacker	US	CLOUDFLARENET	abus3reports	2024.08.10
4	https://ama.businesshub.pics/scar/attacker attacker	US		abus3reports	2024.08.10
5	https://clp.newtech.lol/scar/attacker attacker	US		abus3reports	2024.08.10
View only the last 5

Beta Service, If you select keyword, you can check detailed information.