Summary: 2025/04/17 18:09
First reported date: 2021/03/04
Inquiry period : 2025/03/18 18:09 ~ 2025/04/17 18:09 (1 months), 25 search results
전 기간대비 28% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Open Directory WsgiDAV Cloudflare opendir NetWireRC 입니다.
악성코드 유형 SparkRAT RAT NirCmd KrakenKeylogger Ransomware RATel 도 새롭게 확인됩니다.
공격자 SideCopy 도 새롭게 확인됩니다.
공격기술 Campaign Phishing Social Engineering 도 새롭게 확인됩니다.
기관 및 기업 Microsoft United States North Korea India UAE China VirusTotal Accenture Okta Akamai 도 새롭게 확인됩니다.
기타 same content c&c Victim Related 등 신규 키워드도 확인됩니다.
* 최근 뉴스기사 Top3:
ㆍ 2025/04/08 Goodbye HTA, Hello MSI: New TTPs and Clusters of an APT driven by Multi-Platform Attacks
ㆍ 2025/04/08 Scattered Spider: Still Hunting for Victims in 2025
Trend graph by period
Related keyword cloud
Top 100| # | Trend | Count | Comparison |
|---|---|---|---|
| 1 | Open Directory | 25 | ▲ 7 (28%) |
| 2 | WsgiDAV | 17 | ▲ 8 (47%) |
| 3 | Cloudflare | 14 | ▲ 5 (36%) |
| 4 | opendir | 10 | ▲ 3 (30%) |
| 5 | same | 4 | ▲ new |
| 6 | content | 3 | ▲ new |
| 7 | c&c | 3 | ▲ new |
| 8 | Microsoft | 2 | ▲ new |
| 9 | Victim | 2 | ▲ new |
| 10 | United States | 2 | ▲ new |
| 11 | Campaign | 2 | ▲ new |
| 12 | Phishing | 2 | ▲ new |
| 13 | Malware | 2 | ▼ -2 (-100%) |
| 14 | Related | 2 | ▲ new |
| 15 | NetWireRC | 2 | ▲ 1 (50%) |
| 16 | different | 1 | ▲ new |
| 17 | httpscoldneonspringfieldassettrycloudflarecom | 1 | ▲ new |
| 18 | SideCopy | 1 | ▲ new |
| 19 | The Shadow Brokers | 1 | ▲ new |
| 20 | IoC | 1 | ▲ new |
| 21 | httpsfygolffractionbathtrycloudflarecom | 1 | ▲ new |
| 22 | powershell | 1 | ▲ new |
| 23 | SparkRAT | 1 | ▲ new |
| 24 | Maybe | 1 | ▲ new |
| 25 | httpsearnmnetapi | 1 | ▲ new |
| 26 | C2 | 1 | ▲ new |
| 27 | North Korea | 1 | ▲ new |
| 28 | httpstcoGxmRuZEbPa | 1 | ▲ new |
| 29 | httpstcok | 1 | ▲ new |
| 30 | 1 | ▲ new | |
| 31 | RAT | 1 | ▲ new |
| 32 | India | 1 | ▲ new |
| 33 | arrest | 1 | ▲ new |
| 34 | IP | 1 | ▲ new |
| 35 | Linux | 1 | ▲ new |
| 36 | ENERGETIC BEAR | 1 | ▲ new |
| 37 | Windows | 1 | ▲ new |
| 38 | Ma | 1 | ▲ new |
| 39 | GitHub | 1 | ▲ new |
| 40 | Update | 1 | ▲ new |
| 41 | Chrome | 1 | ▲ new |
| 42 | Education | 1 | - 0 (0%) |
| 43 | UAE | 1 | ▲ new |
| 44 | Advertising | 1 | ▲ new |
| 45 | China | 1 | ▲ new |
| 46 | MFA | 1 | ▲ new |
| 47 | A | 1 | ▲ new |
| 48 | http | 1 | ▲ new |
| 49 | httpstcoX | 1 | ▲ new |
| 50 | windscribecom | 1 | ▲ new |
| 51 | httpendurancefloorferqecracede | 1 | ▲ new |
| 52 | httpstcoEFNzTec | 1 | ▲ new |
| 53 | ShanHolo | 1 | ▼ -2 (-200%) |
| 54 | httpstcoOr | 1 | ▲ new |
| 55 | httpstcoVUyC | 1 | ▲ new |
| 56 | httpstcoaSb | 1 | ▲ new |
| 57 | cAPTure | 1 | ▲ new |
| 58 | Yea | 1 | ▲ new |
| 59 | lame | 1 | ▲ new |
| 60 | cc | 1 | ▲ new |
| 61 | Next | 1 | ▲ new |
| 62 | stage | 1 | ▲ new |
| 63 | httpstcoZOUNJmYwkc | 1 | ▲ new |
| 64 | NirCmd | 1 | ▲ new |
| 65 | httpstcoxipsReonmS | 1 | ▲ new |
| 66 | Cobalt Strike | 1 | ▲ new |
| 67 | VirusTotal | 1 | ▲ new |
| 68 | Social Engineering | 1 | ▲ new |
| 69 | RSA Conference | 1 | ▲ new |
| 70 | Report | 1 | ▲ new |
| 71 | YouTube | 1 | ▲ new |
| 72 | Cryptocurrency | 1 | ▲ new |
| 73 | KrakenKeylogger | 1 | ▲ new |
| 74 | Ransomware | 1 | ▲ new |
| 75 | RATel | 1 | ▲ new |
| 76 | Accenture | 1 | ▲ new |
| 77 | Okta | 1 | ▲ new |
| 78 | Akamai | 1 | ▲ new |
| 79 | httpspendantaskchicomparabletrycloudflarecom | 1 | ▲ new |
Special keyword group
Top 5
Malware Type
This is the type of malware that is becoming an issue.
| Keyword | Average | Label |
|---|---|---|
| NetWireRC |
|
2 (25%) |
| SparkRAT |
|
1 (12.5%) |
| RAT |
|
1 (12.5%) |
| NirCmd |
|
1 (12.5%) |
| KrakenKeylogger |
|
1 (12.5%) |
Attacker & Actors
The status of the attacker or attack group being issued.
| Keyword | Average | Label |
|---|---|---|
| SideCopy |
|
1 (100%) |
Technique
This is an attack technique that is becoming an issue.
| Keyword | Average | Label |
|---|---|---|
| Campaign |
|
2 (40%) |
| Phishing |
|
2 (40%) |
| Social Engineering |
|
1 (20%) |
Country & Company
This is a country or company that is an issue.
| Keyword | Average | Label |
|---|---|---|
| Cloudflare |
|
14 (53.8%) |
| Microsoft |
|
2 (7.7%) |
| United States |
|
2 (7.7%) |
| North Korea |
|
1 (3.8%) |
| India |
|
1 (3.8%) |
Threat info
Last 5SNS
(Total : 23)Open Directory Cloudflare opendir ENERGETIC BEAR c&c C2
News
(Total : 2)Microsoft United States Attacker Open Directory Malware Victim Phishing NetWireRC c&c Campaign Linux Cobalt Strike arrest Windows China North Korea India Chrome GitHub Update powershell Education UAE Advertising RAT Email SparkRAT Akamai IoC KrakenKeylogger VirusTotal Social Engineering RSA Conference Report YouTube Cryptocurrency Ransomware The Shadow Brokers MFA RATel Accenture Okta NirCmd SideCopy
| No | Title | Date |
|---|---|---|
| 1 | Goodbye HTA, Hello MSI: New TTPs and Clusters of an APT driven by Multi-Platform Attacks - Malware.News | 2025.04.08 |
| 2 | Scattered Spider: Still Hunting for Victims in 2025 - Malware.News | 2025.04.08 |
Additional information
| No | Title | Date |
|---|---|---|
| 1 | IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia - Malware.News | 2025.04.17 |
| 2 | 엔디비아 'AI 심장부' GPU에 보안 구멍.. '즉시 패치' 비상 - 시큐리티팩트 | 2025.04.17 |
| 3 | Hi, robot: Half of all internet traffic now automated - Malware.News | 2025.04.17 |
| 4 | Zoom Sees Outage With 50,000 Users Reporting Availability Issues - Bloomberg Technology | 2025.04.17 |
| 5 | Nude photos and names: KU Health and Kansas hospital sued for data breach - Malware.News | 2025.04.17 |
| View only the last 5 | ||
| No | Title | Date |
|---|---|---|
| 1 | Goodbye HTA, Hello MSI: New TTPs and Clusters of an APT driven by Multi-Platform Attacks - Malware.News | 2025.04.08 |
| 2 | Scattered Spider: Still Hunting for Victims in 2025 - Malware.News | 2025.04.08 |
| 3 | Scattered Spider: Still Hunting for Victims in 2025 - Malware.News | 2025.04.08 |
| 4 | Scattered Spider: Still Hunting for Victims in 2025 - Malware.News | 2025.04.08 |
| 5 | Scattered Spider: Still Hunting for Victims in 2025 - Malware.News | 2025.04.08 |
| View only the last 5 | ||