popup

Cyber Threat Trends

  1. Day Week

conference CrowdStrike 북한

Summary: 2025/04/19 12:31

First reported date: 2016/07/29
Inquiry period : 2025/03/20 12:31 ~ 2025/04/19 12:31 (1 months), 5 search results

전 기간대비 신규 트렌드를 보이고 있습니다.
악성코드 유형 RAT NetWireRC Trojan 도 새롭게 확인됩니다.
공격기술 hijack Exploit Campaign 도 새롭게 확인됩니다.
기관 및 기업 Google South Korea Japan 도 새롭게 확인됩니다.
기타 SpyNote Malware Android target BadBazaar 등 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/11 Bogus Google Play pages tapped for SpyNote malware distribution
    ㆍ 2025/04/11 SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1SpyNote 5 ▲ new
2Malware 5 ▲ new
3Android 4 ▲ new
4Google 4 ▲ new
5target 3 ▲ new
6BadBazaar 2 ▲ new
7RAT 2 ▲ new
8Report 2 ▲ new
9threat 2 ▲ new
10hijack 1 ▲ new
11fake 1 ▲ new
12MissAV 1 ▲ new
13NetWireRC 1 ▲ new
14spyware 1 ▲ new
15cybercrime 1 ▲ new
16South Korea 1 ▲ new
17ThreatProtection 1 ▲ new
18Exploit 1 ▲ new
19Play 1 ▲ new
20Mobile 1 ▲ new
21MOONSHINE 1 ▲ new
22DomainTools 1 ▲ new
23Bogus 1 ▲ new
24attack 1 ▲ new
25Trojan 1 ▲ new
26Distribution 1 ▲ new
27Campaign 1 ▲ new
28Browser 1 ▲ new
29Chrome 1 ▲ new
30Japan 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
RAT
2 (50%)
NetWireRC
1 (25%)
Trojan
1 (25%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

No data.

Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
hijack
1 (33.3%)
Exploit
1 (33.3%)
Campaign
1 (33.3%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
Google
4 (66.7%)
South Korea
1 (16.7%)
Japan
1 (16.7%)
Threat info
Last 5

SNS

(Total : 3)
  Total keyword

Malware target Google Android South Korea NetWireRC RAT spyware Exploit Report hijack Japan

No Title Date
1Threat Intelligence @threatintel
#ThreatProtection SpyNote RAT masquerades as a fake MissAV APK, targeting mobile users in Japan, South Korea, and beyond. Hosted on a malicious domain created after the main MissAV site was seized. https://t.co/o0V6rnx5s0 #Cybersecurity #Cybercrime #Spyware		2025.04.15
2Cyber_OSINT @Cyber_O51NT
A new report from DomainTools warns that threat actors are using spoofed app install pages to deliver the SpyNote Android malware via newly registered domains that mimic Google Play listings. #CyberSecurity #SpyNote https://t.co/r3upi8w46L		2025.04.11
3The Hacker News @TheHackersNews
⚡ Mobile Malware Alert — Cybersecurity researchers warn of rising threats from SpyNote, BadBazaar, and MOONSHINE malware. ➡️ SpyNote exploits fake Google Play pages to hijack Android devices — stealing data, mic, and camera access. ➡️ BadBazaar and MOONSHINE target Tibetan, https://t.co/ogpu8XVSNH		2025.04.11

News

(Total : 2)
  Total keyword

Malware Google Android Distribution attack Trojan RAT Campaign Report target Browser Chrome

No Title Date
1Bogus Google Play pages tapped for SpyNote malware distribution - Malware.News2025.04.11
2SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps - The Hacker News2025.04.11

Additional information

No data
No data
No data
No URL CC ASN Co Reporter Date
1http://192.252.180.196:2025/ready.apk
apk opendir ready.apk SpyNote 		US USBGPNET Global ASNNDA0E2025.04.17
2https://www.kmyjh.top/002.apk
android apk SpyNote 		ZA ZAPOWER LINE DATACENTERJAMESWT_WT2025.04.13
3https://www.kmyjh.top/005.apk
android apk SpyNote 		ZA ZAPOWER LINE DATACENTERJAMESWT_WT2025.04.13
4https://www.kmyjh.top/004.apk
android apk SpyNote 		ZA ZAPOWER LINE DATACENTERJAMESWT_WT2025.04.13
5https://www.kmyjh.top/003.apk
android apk SpyNote 		ZA ZAPOWER LINE DATACENTERJAMESWT_WT2025.04.13
View only the last 5
Beta Service, If you select keyword, you can check detailed information.