popup

Cyber Threat Trends

  1. Day Week

conference CrowdStrike 북한

Summary: 2025/04/17 16:51

First reported date: 2014/07/29
Inquiry period : 2025/03/18 16:51 ~ 2025/04/17 16:51 (1 months), 17 search results

전 기간대비 71% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 BlackSuit Royal Ransomware Victim Report 입니다.
악성코드 유형 SectopRAT RATel NetWireRC XMRig Rhysida IDATLoader 도 새롭게 확인됩니다.
공격자 UNC5221 Kill Security 도 새롭게 확인됩니다.
공격기술 Remote Code Execution DDoS Exploit Stealer Social Engineering 도 새롭게 확인됩니다.
기관 및 기업 India Apple Check Point Cisco Germany US Saudi Arabia United Kingdom 도 새롭게 확인됩니다.
기타 Mail group Fake Zoom DarkWeb 등 신규 키워드도 확인됩니다.

According to Trend Micro, this ransomware has significant code overlap with Royal Ransomware.  Ref.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/07 7th April – Threat Intelligence Report
    ㆍ 2025/04/02 Royal Mail Group Loses 144GB to Infostealers: Same Samsung Hacker, Same 2021 Infostealer Log
    ㆍ 2025/03/31 Fake Zoom Ends in BlackSuit Ransomware


참고로 동일한 그룹의 악성코드 타입은 WannaCry Sodinokibi Phobos 등 78개 종이 확인됩니다.

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1BlackSuit 17 ▲ 12 (71%)
2Royal 9 ▲ 7 (78%)
3Ransomware 8 ▲ 6 (75%)
4Victim 5 ▲ 4 (80%)
5Report 5 ▲ 4 (80%)
6target 4 ▲ 3 (75%)
7Mail 4 ▲ new
8United States 3 ▲ 2 (67%)
9Malware 3 ▲ 1 (33%)
10group 3 ▲ new
11Fake 3 ▲ new
12Zoom 3 ▲ new
13DarkWeb 3 ▲ new
14Alert 3 ▲ new
15Cobalt Strike 2 ▲ new
16SectopRAT 2 ▲ new
17Operation 2 ▲ 1 (50%)
18Saudi 2 ▲ new
19Campaign 2 - 0 (0%)
20RATel 2 ▲ new
21Ends 2 ▲ new
22Remote Code Execution 2 ▲ new
23Glass 2 ▲ new
24intelligence 2 ▲ 1 (50%)
25DDoS 2 ▲ new
26DFIR 2 ▲ new
27Trebilcock 1 ▲ new
28Fraser 1 ▲ new
29PLAY 1 ▲ new
30Unauthenticated 1 ▲ new
31Addons 1 ▲ new
32sensitive 1 ▲ new
33hacker 1 ▲ new
34royalmail 1 ▲ new
35databreach 1 ▲ new
36Arbitrary 1 ▲ new
37NetWireRC 1 ▲ new
38Elementor 1 ▲ new
39India 1 ▲ new
40Vulnerability 1 - 0 (0%)
41Apple 1 ▲ new
42Storm 1 ▲ new
43Dark 1 ▲ new
44KILLERS 1 ▲ new
45SERVER 1 ▲ new
46Kosovo 1 ▲ new
47UNC5221 1 ▲ new
48ZeroDay 1 ▲ new
49Update 1 ▲ new
50hacking 1 - 0 (0%)
51CVSS 1 ▲ new
52XMRig 1 ▲ new
53Check Point 1 ▲ new
54Rhysida 1 ▲ new
55Cisco 1 ▲ new
56Customer 1 ▲ new
57Germany 1 ▲ new
58China 1 - 0 (0%)
59Android 1 ▲ new
60Samsung 1 ▲ new
61Gmail 1 ▲ new
62Register 1 ▲ new
63Data 1 ▲ new
64httpstcovjmf 1 ▲ new
65impact 1 ▲ new
66leak 1 ▲ new
67IDATLoader 1 ▲ new
68Cobalt 1 ▲ new
69amp 1 ▲ new
70Breach 1 ▲ new
71Alleged 1 ▲ new
72Force 1 ▲ new
73Sample 1 ▲ new
74Billion 1 ▲ new
75Forms 1 ▲ new
76US 1 ▲ new
77Dhabi 1 ▲ new
78Abu 1 ▲ new
79Data Center 1 ▲ new
80Air 1 ▲ new
81Saudi Arabia 1 ▲ new
82Kill Security 1 ▲ new
83Exploit 1 ▲ new
84Falls 1 ▲ new
85Airforce 1 ▲ new
86Supply chain 1 ▲ new
87attack 1 ▲ new
88WordPress 1 ▲ new
89Email 1 ▼ -1 (-100%)
90Browser 1 ▲ new
91LinkedIn 1 ▲ new
92SaudiArabia 1 ▲ new
93Twitter 1 ▲ new
94Stealer 1 ▲ new
95Criminal 1 - 0 (0%)
96United Kingdom 1 ▲ new
97ChatGPT 1 ▲ new
98Phishing 1 - 0 (0%)
99Social Engineering 1 ▲ new
100Team 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
BlackSuit
17 (40.5%)
Royal
9 (21.4%)
Ransomware
8 (19%)
SectopRAT
2 (4.8%)
RATel
2 (4.8%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

Keyword Average Label
UNC5221
1 (50%)
Kill Security
1 (50%)
Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
Campaign
2 (18.2%)
Remote Code Execution
2 (18.2%)
DDoS
2 (18.2%)
hacking
1 (9.1%)
Exploit
1 (9.1%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
United States
3 (25%)
India
1 (8.3%)
Apple
1 (8.3%)
Check Point
1 (8.3%)
Cisco
1 (8.3%)
Malware Family
Top 5

A malware family is a group of applications with similar attack techniques.
In this trend, it is classified into Ransomware, Stealer, RAT or Backdoor, Loader, Botnet, Cryptocurrency Miner.

Threat info
Last 5

SNS

(Total : 12)
  Total keyword

BlackSuit Royal Ransomware target Victim DDoS Remote Code Execution Report DarkWeb Saudi Arabia Kill Security Cobalt Strike Cobalt IDATLoader RATel SectopRAT Operation

No Title Date
1FalconFeeds.io @FalconFeedsio
???? DDoS Alert ???? Dark Storm Team claims to have targeted multiple website in Kosovo. * Ministry of Health???????? * Spitali Royal Medical???????? * University of Mitrovica???????? https://t.co/3kZJaAp3gy		2025.04.13
2FalconFeeds.io @FalconFeedsio
???? DDoS Alert ???? SERVER KILLERS claims to have targeted multiple website in Kosovo. • Kosovo Chamber of Mediators • Spitali Royal Medical • American Hospital Kosova • National Institute of Public Health of Kosovo • Independent Oversight Council for the Kosovo Civil Service https://t.co/OmxI7Nj		2025.04.13
3FalconFeeds.io @FalconFeedsio
???? Ransomware Alert: PLAY Ransomware group has added 2 new victims to their dark web portal. * Royal Glass Company, Inc ???????? a leading commercial glass contractor specializing in glass and glazing services for projects including stadiums, universities, hospitals, office https://t.co/GMWAZzd		2025.04.04
4Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer
????????????Royal Glass and Fraser Trebilcock has Fallen Victim to PLAY Ransomware https://t.co/1FFAQVSA12		2025.04.04
5Kimberly @StopMalvertisin
The Register | Customer info allegedly stolen from Royal Mail, Samsung via compromised supplier https://t.co/niGjLWxgW2		2025.04.03

News

(Total : 5)
  Total keyword

BlackSuit United States Malware Report Attacker intelligence Ransomware DarkWeb Royal Campaign Victim Cobalt Strike NetWireRC Vulnerability CVSS Android Germany China India SectopRAT Cisco RATel Rhysida Check Point XMRig hacking Apple Update ZeroDay Email Supply chain Phishing Data Center US Social Engineering ChatGPT Operation United Kingdom Criminal Stealer Gmail Twitter LinkedIn Exploit Browser WordPress target attack UNC5221

No Title Date
17th April – Threat Intelligence Report - Malware.News2025.04.07
2[webapps] Royal Elementor Addons and Templates 1.3.78 - Unauthenticated Arbitrary File Upload - Exploit-DB.com2025.04.05
3Royal Mail Group Loses 144GB to Infostealers: Same Samsung Hacker, Same 2021 Infostealer Log - Malware.News2025.04.02
4Fake Zoom Ends in BlackSuit Ransomware - Malware.News2025.03.31
5Abu Dhabi Forms $25 Billion US Energy Venture to Power AI - Bloomberg Technology2025.03.20

Additional information

No Title Date
17th April – Threat Intelligence Report - Malware.News2025.04.07
27th April – Threat Intelligence Report - Malware.News2025.04.07
37th April – Threat Intelligence Report - Malware.News2025.04.07
4BlackBasta Leaks: Lessons from the Ascension Health attack - Malware.News2025.02.28
5BlackBasta Leaks: Lessons from the Ascension Health attack - Malware.News2025.02.28
View only the last 5
No data
No data
No data
No data
Beta Service, If you select keyword, you can check detailed information.