Summary: 2025/05/02 13:11

First reported date: 2015/01/08
Inquiry period : 2025/04/02 13:11 ~ 2025/05/02 13:11 (1 months), 5 search results

전 기간대비 80% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는
Steal 입니다.
기타 Cryptocurrency PyPI Malicious Python Didnt 등 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/23 Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack
    ㆍ 2025/04/17 This CEO Wants You to Know He Didn’t Steal Money While Cooking the Books
    ㆍ 2025/04/05 Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

Trend graph by period


Related keyword cloud
Top 100

# Trend Count Comparison
1Steal 5 ▲ 4 (80%)
2Cryptocurrency 3 ▲ new
3PyPI 2 ▲ new
4Malicious 2 ▲ new
5Python 2 ▲ new
6Didnt 1 ▲ new
7npm 1 ▲ new
8js 1 ▲ new
9Ripple 1 ▲ new
10Supply chain 1 ▲ new
11attack 1 - 0 (0%)
12Software 1 ▲ new
13Backdoor 1 - 0 (0%)
14Java 1 ▲ new
15Books 1 ▲ new
16Money 1 ▲ new
17Hathaways 1 ▲ new
18CEO 1 ▲ new
19Report 1 ▲ new
20Breach 1 ▲ new
21NetJets 1 ▲ new
22Berkshire 1 ▲ new
23Email 1 ▲ new
24GitHub 1 ▲ new
25Malware 1 ▲ new
26Fake 1 ▲ new
27Packages 1 ▲ new
28Package 1 ▲ new
Special keyword group
Top 5

Malware Type
Malware Type

This is the type of malware that is becoming an issue.


No data.

Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.


Keyword Average Label
Attack technique
Technique

This is an attack technique that is becoming an issue.


Keyword Average Label
Backdoor
1 (100%)
Country & Company
Country & Company

This is a country or company that is an issue.


No data.

Additional information

Level Description
warning File has been identified by 27 AntiVirus engines on VirusTotal as malicious
watch Drops a binary and executes it
watch Found URLs in memory pointing to an IP address rather than a domain (potentially indicative of Command & Control traffic)
watch One or more non-whitelisted processes were created
watch Requests access to read memory contents of lsass.exe potentially indicative of credential dumping
watch Resumed a suspended thread in a remote process potentially indicative of process injection
notice A process created a hidden window
notice Allocates read-write-execute memory (usually to unpack itself)
notice An application raised an exception which may be indicative of an exploit crash
notice Creates (office) documents on the filesystem
notice Creates a shortcut to an executable file
notice Creates a suspicious process
notice Creates executable files on the filesystem
notice Drops an executable to the user AppData folder
notice One or more potentially interesting buffers were extracted
notice Potentially malicious URLs were found in the process memory dump
notice Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation
notice Starts servers listening
notice Steals private information from local Internet browsers
notice Yara rule detected in process memory
info Checks amount of memory in system
info Checks if process is being debugged by a debugger
info One or more processes crashed
info Tries to locate where the browsers are installed
No data
No data
Beta Service, If you select keyword, you can check detailed information.