Cyber Threat Trends

Summary: 2025/05/02 18:03

First reported date: 2009/07/08
Inquiry period : 2025/04/02 18:03 ~ 2025/05/02 18:03 (1 months), 21 search results

전 기간대비 43% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Korea North Korea North South Korea Kaspersky 입니다.
공격자 Lazarus Kimsuky 도 새롭게 확인됩니다.
공격기술 ClickFix Social Engineering ClearFake Phishing 도 새롭게 확인됩니다.
기관 및 기업 Iran Proofpoint Italy Mandiant 도 새롭게 확인됩니다.
기타 target statesponsored March Looks socialengineering 등 신규 키워드도 확인됩니다.

* 최근 뉴스기사 Top3:
    ㆍ 2025/04/26 South Korea: Unauthorized user data transfer conducted by DeepSeek
    ㆍ 2025/04/24 Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Zero-Day and ThreatNeedle Malware
    ㆍ 2025/04/10 March 2025 APT Group Trends (South Korea)

Date range button:

First seen:

Last seen:

Keyword

Trend graph by period

Related keyword cloud

Top 100

#	Trend	Count	Comparison
1	Korea	21	▲ 9 (43%)
2	North Korea	14	▲ 7 (50%)
3	North	12	▲ 5 (42%)
4	South Korea	7	▲ 2 (29%)
5	Malware	6	- 0 (0%)
6	Kaspersky	6	▲ 5 (83%)
7	ClickFix	6	▲ new
8	Report	6	▲ 1 (17%)
9	Campaign	6	▲ 2 (33%)
10	South	6	▲ 3 (50%)
11	Iran	5	▲ new
12	Russia	5	▲ 4 (80%)
13	attack	3	▼ -1 (-33%)
14	APT	3	▲ 1 (33%)
15	Operation	3	▲ 2 (67%)
16	target	3	▲ new
17	Proofpoint	3	▲ new
18	hacking	2	- 0 (0%)
19	dprk	2	▲ 1 (50%)
20	China	2	▲ 1 (50%)
21	statesponsored	2	▲ new
22	intelligence	2	▲ 1 (50%)
23	Europe	2	▲ 1 (50%)
24	Google	2	▲ 1 (50%)
25	AhnLab	2	- 0 (0%)
26	Social Engineering	2	▲ new
27	March	2	▲ new
28	Group	2	▼ -1 (-50%)
29	Looks	2	▲ new
30	socialengineering	2	▲ new
31	Alleged	1	▲ new
32	user	1	▲ new
33	ZeroDay	1	▲ new
34	Unauthorized	1	▲ new
35	DeepSeek	1	▲ new
36	Lazarus	1	▲ new
37	Firms	1	▲ new
38	Software	1	▲ new
39	Korean	1	▲ new
40	Italy	1	▲ new
41	Sale	1	▲ new
42	Mr	1	▲ new
43	Job	1	▲ new
44	Stole	1	▲ new
45	Government	1	- 0 (0%)
46	Admin	1	▲ new
47	Station	1	▲ new
48	Charging	1	▲ new
49	Eurojust	1	▲ new
50	KSJOB	1	▲ new
51	Arrangement	1	▲ new
52	Republic	1	▲ new
53	Web	1	▲ new
54	c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012	1	▲ new
55	cachedatexe	1	▲ new
56	Email	1	▲ new
57	Employee	1	▲ new
58	ClearFake	1	▲ new
59	powershell	1	▲ new
60	Mandiant	1	▲ new
61	look	1	▲ new
62	Workers	1	▲ new
63	BYD	1	▲ new
64	Hyundai	1	▲ new
65	Co	1	▲ new
66	Double	1	▲ new
67	Kimsuky	1	▲ new
68	lnk	1	▲ new
69	cti	1	- 0 (0%)
70	Targets	1	▲ new
71	appexe	1	▲ new
72	c0682c72db57aae7c05d08e79f2d82825be2c2cdcb162c19e4c8bf5a737dcb20	1	▲ new
73	boring	1	▲ new
74	sample	1	▲ new
75	Cryptocurrency	1	▲ new
76	Update	1	▼ -1 (-100%)
77	threat	1	▲ new
78	State	1	▲ new
79	TA427	1	▲ new
80	think	1	▲ new
81	Copy	1	▲ new
82	Paste	1	▲ new
83	Get	1	▲ new
84	Criminal	1	▲ new
85	threatinsight	1	▲ new
86	Phishing	1	▲ new
87	young	1	▲ new

Special keyword group

Top 5

Malware Type

This is the type of malware that is becoming an issue.

No data.

Attacker & Actors

The status of the attacker or attack group being issued.

Keyword	Average	Label
Lazarus		1 (50%)
Kimsuky		1 (50%)

Technique

This is an attack technique that is becoming an issue.

Keyword	Average	Label
ClickFix		6 (28.6%)
Campaign		6 (28.6%)
APT		3 (14.3%)
hacking		2 (9.5%)
Social Engineering		2 (9.5%)

Country & Company

This is a country or company that is an issue.

Keyword	Average	Label
North Korea		14 (26.4%)
South Korea		7 (13.2%)
Kaspersky		6 (11.3%)
Iran		5 (9.4%)
Russia		5 (9.4%)

Threat info

Last 5

SNS

(Total : 12)

Total keyword

North Korea ClickFix Iran Russia Kaspersky Campaign Proofpoint South Korea Social Engineering hacking Malware ClearFake Report Criminal Kimsuky Email Italy dprk APT Update powershell target Attacker Government

No	Title	Date
1	Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer ???????????? South Korea Charging Station Admin Access, Nationwide Coverage Full admin access to mobile phone charging/storage units across South Korea. ????️ Locations Covered: • Seoul, Busan, Airports, Train/Subway Stations, Lotte Buildings, Hospitals, Government Offices ????️ Features & ht	2025.04.30
2	MalwareHunterTeam @malwrhunterteam "cache.dat.exe": c39ecc7d9f1e225a37304345731fffe72cdb95b21aeb06aa6022f6d338777012 Looks some North Korea related shit, seen from Italy... ????‍♂️ https://t.co/dNiAMesiHe	2025.04.29
3	Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer ???????????? Alleged Sale of KSJOB Korea Employee Database A threat actor is offering a database allegedly containing sensitive employee information from a Korean organization. ???? Records: 35K employees ???? Price: $8,000 ???? Data Includes: ???? Name, Address, Zip Code, SSN, Phone, Email https	2025.04.27
4	Virus Bulletin @virusbtn Proofpoint researchers discovered state-sponsored actors from North Korea, Iran and Russia experimenting in multiple campaigns with the ClickFix social engineering technique as a stage in their infection chains. https://t.co/3ZswvWTX7u https://t.co/8OWQnTUthJ	2025.04.24
5	Cyber_OSINT @Cyber_O51NT Proofpoint researchers found that state-sponsored actors from North Korea, Iran, and Russia have begun using the ClickFix social engineering technique, previously linked to cybercriminals, in their espionage campaigns from late 2024 to early 2025. #Cyber… https://t.co/iEvIvXq9m8	2025.04.18

News

(Total : 9)

Total keyword

Report South Korea Malware North Korea Campaign Operation attack target APT AhnLab Europe China intelligence Google Kaspersky Software ZeroDay Lazarus DPRK Mandiant Cryptocurrency Phishing

No	Title	Date
1	North Korea Stole Your Job - Security Latest- WIRED	2025.05.01
2	Working Arrangement signed with Republic of Korea - Eurojust	2025.04.30
3	South Korea: Unauthorized user data transfer conducted by DeepSeek - Malware.News	2025.04.26
4	Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Zero-Day and ThreatNeedle Malware - The Hacker News	2025.04.24
5	DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack - The Hacker News	2025.04.24

Additional information

No	Title	Date
1	xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs - Malware.News	2025.05.02
2	Top NSC official wants to normalize offensive hacking as tool of US might - Malware.News	2025.05.02
3	Widespread Fortune 500 firm infiltration conducted by North Koreans - Malware.News	2025.05.02
4	Third-party breach compromises Ascension Health patient data - Malware.News	2025.05.02
5	Multi-stage malware attacks launched by Nebulous Mantis APT - Malware.News	2025.05.02
View only the last 5

No	Title	Date
1	Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Zero-Day and ThreatNeedle Malware - The Hacker News	2025.04.24
2	DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack - The Hacker News	2025.04.24
3	DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack - The Hacker News	2025.04.24
4	March 2025 APT Group Trends (South Korea) - Malware.News	2025.04.10
5	March 2025 APT Group Trends (South Korea) - ASEC BLOG	2025.04.09
View only the last 5

No data

Beta Service, If you select keyword, you can check detailed information.