Summary: 2025/05/04 09:42
First reported date: 2010/11/26
Inquiry period : 2025/04/04 09:42 ~ 2025/05/04 09:42 (1 months), 85 search results
전 기간대비 -15% 낮은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 target Linux RCE hijack Distribution 입니다.
악성코드 유형 BPFDoor TONESHELL XMRig 도 새롭게 확인됩니다.
공격자 Red Menshen 도 새롭게 확인됩니다.
공격기술 Spear Phishing Hijacking 도 새롭게 확인됩니다.
기관 및 기업 Egypt Zscaler 도 새롭게 확인됩니다.
기타 MUSTANG PANDA Controller 사용 Mustang ML 등 신규 키워드도 확인됩니다.
* 최근 뉴스기사 Top3:
ㆍ 2025/05/03 Venom Spider Uses Server-Side Polymorphism to Weave a Web Around Victims
ㆍ 2025/05/02 SKT 해킹 배후에 중국 그림자?.. 악명 떨치는 중국계 해킹 조직들
ㆍ 2025/05/01 Detailed Analysis of BPFDoor targeting South Korean Company
Trend graph by period
Related keyword cloud
Top 100Special keyword group
Top 5
Malware Type
This is the type of malware that is becoming an issue.
| Keyword | Average | Label |
|---|---|---|
| BPFDoor |
|
8 (14.3%) |
| Trojan |
|
6 (10.7%) |
| TONESHELL |
|
5 (8.9%) |
| GameoverP2P |
|
5 (8.9%) |
| Cryptocurrency Miner |
|
5 (8.9%) |
Attacker & Actors
The status of the attacker or attack group being issued.
| Keyword | Average | Label |
|---|---|---|
| Lazarus |
|
4 (57.1%) |
| Red Menshen |
|
3 (42.9%) |
Country & Company
This is a country or company that is an issue.
| Keyword | Average | Label |
|---|---|---|
| China |
|
15 (11.1%) |
| United States |
|
14 (10.4%) |
| Kaspersky |
|
12 (8.9%) |
| Microsoft |
|
10 (7.4%) |
| Government |
|
9 (6.7%) |
Threat info
Last 5SNS
(Total : 39)Backdoor target attack Update Malware Campaign China Phishing Fortinet Kaspersky Exploit iot Linux Trend Micro Cryptocurrency Miner Supply chain c&c RCE XMRig Telegram Russia apt Stealer Attacker hijack Victim BPFDoor Iran Chinese United States WordPress Japan Government Iranian CACTUS SocGholish plugin Email Cisco FakeCaptcha Lumma Botnet Trojan ...
News
(Total : 46)Backdoor Malware target Report Campaign Update Attacker Vulnerability attack Advertising Exploit Software United States Linux intelligence Victim RCE China Windows Microsoft c&c Distribution Kaspersky Phishing Government hijack hacking EDR Operation South Korea ZeroDay GitHub IoC Cobalt Strike Russia BPFDoor GameoverP2P Trojan TONESHELL Hong Kong MUSTANG PANDA Email CISA Taiwan powershell Lazarus Education Twitter Supply chain RAT Europe MFA Google DDoS Egypt Cryptocurrency Miner LinkedIn NetWireRC Red Menshen Apple North Korea Zscaler RSA Conference Java Cryptocurrency GraphicalNeutrino Social Engineering CVSS plugin Hijacking France keylogger Trend Micro ClickFix IoT CoreDN UNIX DYEPACK WordPress Spear Phishing 악성코드 United Kingdom DarkWeb IcedID ChatGPT schtasks Ransomware 백도어 ...
| No | Title | Date |
|---|---|---|
| 1 | Venom Spider Uses Server-Side Polymorphism to Weave a Web Around Victims - Malware.News | 2025.05.03 |
| 2 | SKT 해킹 배후에 중국 그림자?.. 악명 떨치는 중국계 해킹 조직들 - 시큐리티팩트 | 2025.05.02 |
| 3 | Detailed Analysis of BPFDoor targeting South Korean Company - Malware.News | 2025.05.01 |
| 4 | 잉카인터넷, SK텔레콤 공격에 사용된 ‘BPFDoor' 대응 전용 백신 무료 제공 - 데일리시큐 | 2025.04.30 |
| 5 | 중국의 '은밀한 위협', 전기차 배터리가 스파이웨어로? - 시큐리티팩트 | 2025.04.30 |
Additional information
| No | Title | Date |
|---|---|---|
| 1 | 틱톡, 유럽 사용자 데이터 중국 전송.. 8000억대 벌금 - 시큐리티팩트 | 2025.05.03 |
| 2 | Saskatoon children’s hospital nurse unlawfully snooped on records of 314 patients: privacy report - Malware.News | 2025.05.03 |
| 3 | Dating app Raw exposed users’ location data and personal information - Malware.News | 2025.05.03 |
| 4 | Hacker hired Telangana man to courier threats to Star Health Insurance MD - Malware.News | 2025.05.03 |
| 5 | Acadian Ambulance Seeks Dismissal of Data Breach Lawsuit - Malware.News | 2025.05.03 |
| View only the last 5 | ||
| No | Title | Date |
|---|---|---|
| 1 | SKT 해킹 배후에 중국 그림자?.. 악명 떨치는 중국계 해킹 조직들 - 시큐리티팩트 | 2025.05.02 |
| 2 | SKT 해킹 배후에 중국 그림자?.. 악명 떨치는 중국계 해킹 조직들 - 시큐리티팩트 | 2025.05.02 |
| 3 | Detailed Analysis of BPFDoor targeting South Korean Company - Malware.News | 2025.05.01 |
| 4 | Detailed Analysis of BPFDoor targeting South Korean Company - Malware.News | 2025.05.01 |
| 5 | Detailed Analysis of BPFDoor targeting South Korean Company - Malware.News | 2025.05.01 |
| View only the last 5 | ||
| Level | Description |
|---|---|
| warning | File has been identified by 24 AntiVirus engines on VirusTotal as malicious |
| watch | Creates known Upatre files |
| notice | Allocates read-write-execute memory (usually to unpack itself) |
| notice | Checks for the Locally Unique Identifier on the system for a suspicious privilege |
| notice | Creates executable files on the filesystem |
| notice | Drops an executable to the user AppData folder |
| notice | One or more potentially interesting buffers were extracted |
| notice | Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation |
| notice | The binary likely contains encrypted or compressed data indicative of a packer |
| info | Checks amount of memory in system |
| info | Checks if process is being debugged by a debugger |
| info | Queries for the computername |
| info | The file contains an unknown PE resource name possibly indicative of a packer |
| info | This executable has a PDB path |
| info | Uses Windows APIs to generate a cryptographic key |
| No | URL | CC | ASN Co | Reporter | Date |
|---|---|---|---|---|---|
| 1 | http://92.41.52.166:8083/sshd backdoor censys elf sshdkit | GB  | Three | DaveLikesMalwre | 2025.05.04 |
| 2 | http://134.35.31.210:8080/sshd backdoor censys elf sshdkit | YE  | ... | DaveLikesMalwre | 2025.05.04 |
| 3 | http://120.61.29.97:2000/sshd backdoor censys elf sshdkit | IN  | ... | DaveLikesMalwre | 2025.05.04 |
| 4 | http://59.182.123.229:2000/sshd backdoor censys elf sshdkit | IN | DaveLikesMalwre | 2025.05.04 | |
| 5 | http://86.150.68.246:82/sshd backdoor censys elf sshdkit | GB | British Telecommunications PLC | DaveLikesMalwre | 2025.05.04 |
| View only the last 5 | |||||