popup

Cyber Threat Trends

  1. Day Week

conference CrowdStrike 북한

Summary: 2025/04/19 11:19

First reported date: 2015/07/01
Inquiry period : 2025/03/20 11:19 ~ 2025/04/19 11:19 (1 months), 9 search results

전 기간대비 67% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 SSRF Update attack Malware 입니다.
악성코드 유형 Vawtrak 도 새롭게 확인됩니다.
공격기술 Backdoor hijack RCE 도 새롭게 확인됩니다.
기관 및 기업 Amazon 도 새롭게 확인됩니다.
기타 Server Side Request Forgery target 등 신규 키워드도 확인됩니다.

서버 측에서 위조된 HTTP 요청을 발생시켜 직접적인 접근이 제한된 서버 내부 자원에 접근하여 외부로 데이터 유출 및 오동작을 유발하는 공격

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/15 [webapps] IBMi Navigator 7.5 - Server Side Request Forgery (SSRF)
    ㆍ 2025/04/15 [webapps] Plane 0.23.1 - Server side request forgery (SSRF)
    ㆍ 2025/04/03 [local] ollama 0.6.4 - Server Side Request Forgery (SSRF)

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1SSRF 9 ▲ 6 (67%)
2Update 3 ▲ 2 (67%)
3attack 3 ▲ 2 (67%)
4Server 3 ▲ new
5Side 3 ▲ new
6Request 3 ▲ new
7Forgery 2 ▲ new
8Malware 2 ▲ 1 (50%)
9target 2 ▲ new
10CVE 2 ▲ new
11Vulnerability 2 - 0 (0%)
12amp 1 ▲ new
13Alert 1 ▲ new
14metadata 1 ▲ new
15AWS 1 ▲ new
16instance 1 ▲ new
17EC2 1 ▲ new
18Hit 1 ▲ new
19Amazon 1 ▲ new
20c&c 1 ▲ new
21Operation 1 ▲ new
22CrushFTP 1 ▲ new
23Weve 1 ▲ new
24Plane 1 ▲ new
25QRadar Security Suite 1 - 0 (0%)
26IBMi 1 ▲ new
27Navigator 1 ▲ new
28cve202427564 1 ▲ new
29persistence 1 ▲ new
30vulnerable 1 ▲ new
31ChatGPT 1 ▲ new
32Education 1 - 0 (0%)
33PHP 1 ▲ new
34Schwachstellen 1 - 0 (0%)
35Mehrere 1 ▲ new
36DoTNet 1 ▲ new
37intelligence 1 ▼ -1 (-100%)
38Software 1 ▲ new
39GameoverP2P 1 - 0 (0%)
40cloud 1 ▲ new
41silent 1 ▲ new
42likely 1 ▲ new
43IcedID 1 - 0 (0%)
44Report 1 - 0 (0%)
45United States 1 - 0 (0%)
46powershell 1 ▲ new
47Microsoft 1 - 0 (0%)
48WMI 1 ▲ new
49MFA 1 - 0 (0%)
50Vawtrak 1 ▲ new
51XDR 1 ▲ new
52Windows 1 ▲ new
53Twitter 1 - 0 (0%)
54LinkedIn 1 - 0 (0%)
55ZeroDay 1 - 0 (0%)
56Exploit 1 ▼ -1 (-100%)
57Advertising 1 - 0 (0%)
58Email 1 - 0 (0%)
59Backdoor 1 ▲ new
60doesnt 1 ▲ new
61hijack 1 ▲ new
62RCE 1 ▲ new
63mittel 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
GameoverP2P
1 (33.3%)
IcedID
1 (33.3%)
Vawtrak
1 (33.3%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

Keyword Average Label
Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
Exploit
1 (25%)
Backdoor
1 (25%)
hijack
1 (25%)
RCE
1 (25%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
Amazon
1 (33.3%)
United States
1 (33.3%)
Microsoft
1 (33.3%)
Threat info
Last 5

SNS

(Total : 3)
  Total keyword

SSRF CVE ChatGPT Vulnerability attack Update Education

No Title Date
1Unit 42 @Unit42_Intel
We've seen persistence in #CVE202427564 #SSRF probes for vulnerable ChatGPT servers, requesting /etc/passwd and URLs using OAST domains. Increase of probes hitting Education (16.6%) and Manufacturing (8%) since Feb 2025. Details at https://t.co/7LxKncmYiy https://t.co/wZgrL68q9q		2025.04.16
2Hunter @HunterMapping
????Alert???? CVE-2025-32102 & CVE-2025-32103: CrushFTP Hit by SSRF and Directory Traversal Vulnerabilities ????PoC：https://t.co/lQtUDLHxUP ????120K+ Services are found on the https://t.co/ysWb28Crld yearly. ????Hunter Link:https://t.co/OpFcAmqXXM ????Query HUNTER : https://t.co/wiHQ83gyMj		2025.04.15
3The Hacker News @TheHackersNews
???? AWS doesn't secure your cloud—you do. Most cloud breaches happen because customers miss what's theirs to protect. 5 silent risks you're likely exposed to: • SSRF attacks • Leaky S3 buckets • Over-permissive IAM • Unpatched EC2 • Public-facing services AWS secures the https://t.co/a2YOQA1iXB		2025.03.31

News

(Total : 6)
  Total keyword

SSRF Malware target attack Update Amazon Software DoTNet Operation c&c RCE QRadar Security Suite XDR Email hijack MFA IcedID Vulnerability Report United States Attacker powershell Microsoft WMI GameoverP2P intelligence Vawtrak Windows Twitter LinkedIn ZeroDay Exploit Advertising Backdoor

No Title Date
1[UPDATE] [mittel] PHP: Mehrere Schwachstellen - IT Sicherheitsnews2025.04.17
2[webapps] Plane 0.23.1 - Server side request forgery (SSRF) - Exploit-DB.com2025.04.15
3[webapps] IBMi Navigator 7.5 - Server Side Request Forgery (SSRF) - Exploit-DB.com2025.04.15
4Amazon EC2 instance metadata targeted in SSRF attacks - Malware.News2025.04.11
5Stopping attacks against on-premises Exchange Server and SharePoint Server with AMSI - Malware.News2025.04.10

Additional information

No data
No data
No data
No data
Beta Service, If you select keyword, you can check detailed information.