Summary: 2025/05/03 01:04
First reported date: 2012/03/26
Inquiry period : 2025/04/26 01:04 ~ 2025/05/03 01:04 (7 days), 26 search results
전 기간대비 8% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 APT Campaign Malware Government Kaspersky 입니다.
악성코드 유형 ROMCOMRAT CrimsonRAT ROMCOM RAT RAT Konni 도 새롭게 확인됩니다.
공격자 APT28 APT43 도 새롭게 확인됩니다.
공격기술 Phishing Spear Phishing 도 새롭게 확인됩니다.
기관 및 기업 France Iranian ESET Iran NATO 도 새롭게 확인됩니다.
기타 target Asia French TransparentTribe Earth 등 신규 키워드도 확인됩니다.
* 최근 뉴스기사 Top3:
ㆍ 2025/05/02 IPv6 SLAAC exploited by Chinese APT for AitM attacks
ㆍ 2025/05/02 Multi-stage malware attacks launched by Nebulous Mantis APT
ㆍ 2025/04/30 Tracking APT SideWinder Domains By Combining Regex Patterns, Whois Records and Domain Registrars
Trend graph by period
Related keyword cloud
Top 100Special keyword group
Top 5
Malware Type
This is the type of malware that is becoming an issue.
| Keyword | Average | Label |
|---|---|---|
| NetWireRC |
|
3 (25%) |
| ROMCOMRAT |
|
3 (25%) |
| CrimsonRAT |
|
2 (16.7%) |
| ROMCOM RAT |
|
1 (8.3%) |
| RAT |
|
1 (8.3%) |
Country & Company
This is a country or company that is an issue.
| Keyword | Average | Label |
|---|---|---|
| Government |
|
4 (12.1%) |
| dprk |
|
4 (12.1%) |
| North Korea |
|
4 (12.1%) |
| Kaspersky |
|
4 (12.1%) |
| Russia |
|
4 (12.1%) |
Threat info
Last 5SNS
(Total : 21)APT Campaign Malware target North Korea dprk attack Kaspersky NetWireRC France Russia ROMCOMRAT hacking APT28 Cryptocurrency CrimsonRAT Lazarus IoC South Korea Phishing Government hijack Backdoor Update RAT China ROMCOM RAT RomCom Iran ESET Iranian Hijacking Report Spear Phishing Kimsuky APT43 APT37 Chinese Konni
News
(Total : 5)APT Malware Campaign attack target Operation Government Report China NATO APT28 Update Exploit Advertising Software Chinese Russia Kaspersky ROMCOMRAT SideWinder hacking
| No | Title | Date |
|---|---|---|
| 1 | Multi-stage malware attacks launched by Nebulous Mantis APT - Malware.News | 2025.05.02 |
| 2 | IPv6 SLAAC exploited by Chinese APT for AitM attacks - Malware.News | 2025.05.02 |
| 3 | Tracking APT SideWinder Domains By Combining Regex Patterns, Whois Records and Domain Registrars - Malware.News | 2025.04.30 |
| 4 | Southeast Asia targeted by Earth Kurma APT attacks - Malware.News | 2025.04.30 |
| 5 | Targeting and Compromise of French Entities Using the APT28 Intrusion Set / CERT-FR / malpedia | 2025.04.29 |
Additional information
| No | Title | Date |
|---|---|---|
| 1 | Pro-Russian hacktivists intensify DDoS attacks on Dutch orgs - Malware.News | 2025.05.03 |
| 2 | Malware gains persistence by mimicking WordPress security plugin - Malware.News | 2025.05.03 |
| 3 | Malicious PyPi, npm packages found abusing trusted services for data theft - Malware.News | 2025.05.03 |
| 4 | Harrods discloses cyberattack following targeting of other UK retailers - Malware.News | 2025.05.03 |
| 5 | Cyber attack disrupts Bartlesville school systems in Oklahoma - Malware.News | 2025.05.03 |
| View only the last 5 | ||
| No | Title | Date |
|---|---|---|
| 1 | Multi-stage malware attacks launched by Nebulous Mantis APT - Malware.News | 2025.05.02 |
| 2 | Earth Kurma APT Campaign Targets Southeast Asian Government, Telecom Sectors - Malware.News | 2025.04.25 |
| 3 | APT Group Profiles – Larva-24005 - ASEC BLOG | 2025.04.14 |
| 4 | March 2025 APT Group Trends (South Korea) - Malware.News | 2025.04.10 |
| 5 | March 2025 APT Group Trends (South Korea) - ASEC BLOG | 2025.04.09 |
| View only the last 5 | ||
| Level | Description |
|---|---|
| danger | File has been identified by 56 AntiVirus engines on VirusTotal as malicious |
| notice | Creates executable files on the filesystem |
| notice | Drops an executable to the user AppData folder |
| notice | The binary likely contains encrypted or compressed data indicative of a packer |
| info | The executable contains unknown PE section names indicative of a packer (could be a false positive) |
| info | The file contains an unknown PE resource name possibly indicative of a packer |
| info | This executable has a PDB path |
| No | Category | URL | CC | ASN Co | Date |
|---|---|---|---|---|---|
| 1 | c2 | http://00701111.000webhostapp.com/wp-extra/show.php | US  | ... | 2023.09.18 |
| No | URL | CC | ASN Co | Reporter | Date |
|---|---|---|---|---|---|
| 1 | https://jpkinki.com/fjugm APT Kimsuky | US | CLOUDFLARENET | IdaNotPro | 2025.03.26 |
| 2 | https://www.dropbox.com/scl/fi/cnfhxf0nc3qxfklznh5na/zzJG_2.zip?rlkey=7t1et81enar4uvbb7nnk58m9b&st=2... APT Kimsuky zip | US | DROPBOX | abuse_ch | 2025.02.12 |
| 3 | https://www.dropbox.com/scl/fi/icvpzbx4vn6lcthva168z/zzJG.zip?rlkey=kntc36792grkm64xriqputbdq&st=px5... APT Kimsuky | US | DROPBOX | JAMESWT_MHT | 2025.02.05 |
| 4 | https://liuyi.neectar.info/hsdverd_3ed5d/mdswsourt_4rfs APT decoy Patchwork PDF | GB  | abuse_ch | 2025.01.22 | |
| 5 | https://liuyi.neectar.info/lksderdd_4dferd/jhdfer3s_jh3de APT exe Patchwork rustystealer | GB | abuse_ch | 2025.01.22 | |
| View only the last 5 | |||||