popup

Cyber Threat Trends

  1. Day Week

conference CrowdStrike 북한

Summary: 2025/04/17 14:51

First reported date: 2009/11/02
Inquiry period : 2025/03/18 14:51 ~ 2025/04/17 14:51 (1 months), 45 search results

전 기간대비 7% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Banking Malware target Trojan Android 입니다.
악성코드 유형 Grandoreiro Vawtrak DYEPACK Cryptocurrency Miner Interception 도 새롭게 확인됩니다.
공격기술 Social Engineering RCE 도 새롭게 확인됩니다.
기관 및 기업 Spain VirusTotal Mexico Chinese 도 새롭게 확인됩니다.
기타 Crocodilus Windows securityaffairs Linux Latin 등 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/16 Threat Intelligence Snapshot: Week 14, 2025
    ㆍ 2025/04/11 How Huoine Marketplace Is Reshaping Global Fraud
    ㆍ 2025/04/10 PlayPraetor Reloaded: CTM360 Uncovers a Play Masquerading Party

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1Banking 45 ▲ 3 (7%)
2Malware 31 ▲ 4 (13%)
3target 23 ▲ 8 (35%)
4Trojan 21 ▲ 8 (38%)
5Campaign 18 ▼ -1 (-6%)
6Android 18 ▲ 7 (39%)
7Report 15 ▼ -2 (-13%)
8Phishing 13 ▼ -4 (-31%)
9attack 13 - 0 (0%)
10Criminal 10 ▲ 2 (20%)
11Victim 10 - 0 (0%)
12Email 9 ▲ 2 (22%)
13Update 9 ▼ -1 (-11%)
14Software 8 - 0 (0%)
15Operation 7 ▲ 1 (14%)
16intelligence 7 ▼ -3 (-43%)
17Cryptocurrency 7 - 0 (0%)
18Grandoreiro 6 ▲ new
19Stealer 6 ▲ 1 (17%)
20Crocodilus 6 ▲ new
21Windows 6 ▲ new
22hacking 6 ▲ 4 (67%)
23China 6 ▲ 3 (50%)
24Exploit 6 ▼ -6 (-100%)
25Threat 5 ▼ -4 (-80%)
26Remote Code Execution 5 ▼ -6 (-120%)
27India 5 ▲ 3 (60%)
28Spain 5 ▲ new
29Advertising 5 ▼ -3 (-60%)
30Social Engineering 5 ▲ new
31Browser 4 ▼ -3 (-75%)
32Europe 4 - 0 (0%)
33Ransomware 4 - 0 (0%)
34securityaffairs 4 ▲ new
35Telegram 4 ▲ 3 (75%)
36Google 4 ▼ -1 (-25%)
37Takedown 4 ▲ 1 (25%)
38IoC 4 ▼ -1 (-25%)
39Microsoft 4 ▲ 3 (75%)
40Government 4 ▼ -8 (-200%)
41RCE 3 ▲ new
42Vawtrak 3 ▲ new
43Password 3 ▼ -4 (-133%)
44Russia 3 ▼ -3 (-100%)
45DarkWeb 3 - 0 (0%)
46United States 3 ▼ -4 (-133%)
47Distribution 3 - 0 (0%)
48Linux 3 ▲ new
49Mobile 3 ▲ 1 (33%)
50Kaspersky 3 ▼ -4 (-133%)
51Latin 2 ▲ new
52DYEPACK 2 ▲ new
53Russian 2 ▲ new
54Push 2 ▲ new
55Device 2 ▲ new
56CTM 2 ▲ new
57VirusTotal 2 ▲ new
58Cryptocurrency Miner 2 ▲ new
59Chrome 2 ▲ 1 (50%)
60ThreatFabric 2 ▲ new
61arrest 2 - 0 (0%)
62Türkiye 2 ▲ 1 (50%)
63warn 2 ▲ new
64sophisticate 2 ▲ new
65Mexico 2 ▲ new
66Education 2 ▼ -7 (-350%)
67Salvador 2 ▲ new
68NetWireRC 2 ▲ 1 (50%)
69c&c 2 - 0 (0%)
70Data 2 ▲ 1 (50%)
71Java 2 - 0 (0%)
72malicious 2 ▲ 1 (50%)
73Akira 2 ▲ 1 (50%)
74DocuSign 2 ▲ new
75Africa 2 ▲ 1 (50%)
76Lumma 2 ▼ -1 (-50%)
77GameoverP2P 2 ▲ 1 (50%)
78Smishing 2 ▲ 1 (50%)
79Interception 2 ▲ new
80GitHub 2 - 0 (0%)
81ZeroDay 2 - 0 (0%)
82Backdoor 2 ▼ -1 (-50%)
83Snapshot 2 ▼ -1 (-50%)
84Chinese 2 ▲ new
85Cloudflare 1 - 0 (0%)
86Rise 1 ▲ new
87SentinelOne 1 ▲ new
88DPDP 1 ▲ new
89Anchor 1 ▲ new
90Wells 1 ▲ new
91Fargo 1 ▲ new
92Act 1 ▲ new
93BFSI 1 ▲ new
94Malvertising 1 ▲ new
95Expand 1 ▲ new
96Newly 1 ▲ new
97Restructured 1 ▲ new
98European 1 ▲ new
99Stocks 1 ▲ new
100Alleged 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
Trojan
21 (42%)
Grandoreiro
6 (12%)
Ransomware
4 (8%)
Vawtrak
3 (6%)
DYEPACK
2 (4%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

Keyword Average Label
Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
Campaign
18 (27.3%)
Phishing
13 (19.7%)
Stealer
6 (9.1%)
hacking
6 (9.1%)
Exploit
6 (9.1%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
Banking
45 (45.9%)
China
6 (6.1%)
India
5 (5.1%)
Spain
5 (5.1%)
Europe
4 (4.1%)
Threat info
Last 5

SNS

(Total : 13)
  Total keyword

Banking Trojan Malware target Android Report hacking Campaign Grandoreiro India Phishing Victim Rhysida Ransomware Smishing Chinese Australia China DarkWeb Takedown Telegram Rhysida Cryptocurrency Ransomware Russia arrest Kaspersky attack Stealer Africa

No Title Date
1The Hacker News @TheHackersNews
CTM360 just uncovered 16,000+ malicious Android URLs tied to the evolving PlayPraetor campaign. ????️ 5 new variants (Phish, RAT, PWA, Phantom, Veil) now target banking, tech, and energy users globally. The threat is expanding fast. Read the full report: https://t.co/GIVwcjw2mB		2025.04.10
2Cyber_OSINT @Cyber_O51NT
Silent Push reports that the Smishing Triad, a Chinese eCrime group, is targeting over 121 countries with SMS phishing campaigns and has introduced a new banking phishing kit aimed at major financial institutions in Australia and the APAC region. #Smishi… https://t.co/TQXPPETEdB		2025.04.10
3Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer
1️⃣ India – Banking Sector Access for Sale A threat actor is selling CRM access to an Indian banking organization: ???? ~6,000 employees | Revenue: <$720M ???? Access includes: View/Edit documents, tickets ???? Over 200k internal documents ???? Price: $30 2️⃣ South Africa – Business https://t.		2025.04.10
4Dark Web Intelligence @DailyDarkWeb
#India ???????? - Alleged SBI Data Leak Hits 15 Million Accounts Threat actor claims to have leaked sensitive personal info of 15M SBI Bank customers, including DOBs, contact info & PANs. #darkweb #banking #infosec https://t.co/ECcXeY9tw1		2025.04.07
5ANY.RUN @anyrun_app
⚠️ Salvador Stealer is a new #Android #malware that poses as a banking app to steal credentials, intercept SMS and OTPs. ???? It exfiltrates via Telegram and works after reboot. Read technical breakdown of its mechanics ???? https://t.co/Wz3VdHjufO		2025.04.01

News

(Total : 32)
  Total keyword

Banking Malware target Campaign Trojan Android attack Report Phishing Criminal Attacker Update Email Software Victim Operation intelligence Exploit Windows Cryptocurrency Social Engineering China Stealer Spain Remote Code Execution Advertising Google IoC Europe Microsoft Government Grandoreiro Browser Password India RCE United States Telegram Takedown Linux Vawtrak Distribution Ransomware c&c Cryptocurrency Miner NetWireRC Mexico Türkiye Chrome Lumma hacking Backdoor ZeroDay VirusTotal Akira GitHub DocuSign DYEPACK GameoverP2P Interception Kaspersky Russia Java Education DarkWeb OSINT Recorded Future ...

No Title Date
1Threat Intelligence Snapshot: Week 14, 2025 - Malware.News2025.04.16
2European Stocks Rise as Banks Rally; LVMH Miss Hits Luxury - Bloomberg Technology2025.04.15
3Wells Fargo to Expand Newly Restructured Tech Commercial Banking - Bloomberg Technology2025.04.14
4Stripe’s Banking Push Comes as Fintechs Dive Deeper Into Finance - Bloomberg Technology2025.04.13
5How Huoine Marketplace Is Reshaping Global Fraud - Malware.News2025.04.11

Additional information

No Title Date
1Threat Intelligence Snapshot: Week 14, 2025 - Malware.News2025.04.16
2Threat Intelligence Snapshot: Week 14, 2025 - Malware.News2025.04.16
3European Stocks Rise as Banks Rally; LVMH Miss Hits Luxury - Bloomberg Technolo...2025.04.15
4Wells Fargo to Expand Newly Restructured Tech Commercial Banking - Bloomberg Technolo...2025.04.14
5Stripe’s Banking Push Comes as Fintechs Dive Deeper Into Finance - Bloomberg Technolo...2025.04.13
View only the last 5
No data
No data
No data
No URL CC ASN Co Reporter Date
1http://77.105.147.129:8080/getfile.php?download=YXBwLXJlbGVhc2UtMQ==&id=63a9f0ea7bb98050796b649e8548...
android banking hookbot Pegasus trojan 		RU RUPlus Telecom LLCabus3reports2024.05.04
2http://94.156.79.114:8082/getfile.php?download=YXBwLXJlbGVhc2UtMS5hcGs=
android banking hookbot Pegasus trojan 		BG BGNET1 Ltd.abus3reports2024.05.04
3http://147.45.47.44:8080/getfile.php?download=YXBwLXJlbGVhc2UtNA==&id=63a9f0ea7bb98050796b649e854818...
android banking hookbot Pegasus trojan 		RU RUOOO FREEnet Groupabus3reports2024.05.02
4http://147.45.47.44:8080/getfile.php?download=YXBwLXJlbGVhc2UtMQ==&id=63a9f0ea7bb98050796b649e854818...
android banking hookbot Pegasus trojan 		RU RUOOO FREEnet Groupabus3reports2024.05.02
5http://147.45.47.44:8080/getfile.php?download=YXBwLXJlbGVhc2UtMg==&id=63a9f0ea7bb98050796b649e854818...
android banking hookbot Pegasus trojan 		RU RUOOO FREEnet Groupabus3reports2024.05.02
View only the last 5
Beta Service, If you select keyword, you can check detailed information.