Cyber Threat Trends

First reported date: 2014/07/28
Inquiry period : 2025/03/20 22:51 ~ 2025/04/19 22:51 (1 months), 1 search results

전 기간대비 신규 트렌드를 보이고 있습니다.
악성코드 유형 NetWireRC RATel SnatchCrypto Ransomware GameoverP2P 도 새롭게 확인됩니다.
공격자 Kimsuky Lazarus Silent Chollima 도 새롭게 확인됩니다.
공격기술 Campaign 도 새롭게 확인됩니다.
기관 및 기업 CrowdStrike Paloalto Japan North Korea Microsoft 도 새롭게 확인됩니다.
기타 Palo Alto 팔로알토 Victim Cryptocurrency c&c 등 신규 키워드도 확인됩니다.

aka: Andariel, GOP, Guardian of Peace, Onyx Sleet, OperationTroy, PLUTONIUM, Subgroup: Andariel, WHOis Team

Andariel is a threat actor that primarily targets South Korean corporations and institutions. They are believed to collaborate with or operate as a subsidiary organization of the Lazarus threat group. WHOIS utilizes spear phishing attacks, watering hole attacks, and supply chain attacks for initial access. They have been known to exploit vulnerabilities and use malware such as Infostealer and TigerRAT.  Ref.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/03/25 Tempted to Classifying APT Actors: Practical Challenges of Attribution in the Case of Lazarus’s Subgroup