Cyber Threat Trends

Summary: 2025/04/17 16:30

First reported date: 2009/07/08
Inquiry period : 2025/04/10 16:29 ~ 2025/04/17 16:29 (7 days), 75 search results

전 기간대비 상승한 Top5 연관 키워드는 Exploit Update Vulnerability Report attack 입니다.
공격자 Anonymous 도 새롭게 확인됩니다.
공격기술 RCE Hijacking Smishing 도 새롭게 확인됩니다.
기관 및 기업 Ucraina Australia Iran Europe Zscaler 도 새롭게 확인됩니다.
기타 FortiGate OttoKit traffic harmless MWNEWS 등 신규 키워드도 확인됩니다.

* 최근 뉴스기사 Top3:
    ㆍ 2025/04/17 Hi, robot: Half of all internet traffic now automated
    ㆍ 2025/04/17 Exploiting SMS: Threat Actors Use Social Engineering to Target Companies
    ㆍ 2025/04/17 6,000 WordPress Sites Affected by Arbitrary File Move Vulnerability in Drag and Drop Multiple File Upload for WooCommerce WordPress Plugin

Date range button:

First seen:

Last seen:

Keyword

Trend graph by period

Related keyword cloud

Top 100

#	Trend	Count	Comparison
1	Malware	45	▼ -5 (-11%)
2	Exploit	36	▲ 1 (3%)
3	Update	34	▲ 3 (9%)
4	Vulnerability	31	▲ 1 (3%)
5	Report	30	▲ 2 (7%)
6	attack	25	▲ 3 (12%)
7	Campaign	21	▼ -6 (-29%)
8	Microsoft	21	▲ 7 (33%)
9	RCE	20	▲ new
10	Phishing	19	- 0 (0%)
11	target	19	▼ -5 (-26%)
12	United States	18	▼ -5 (-28%)
13	Windows	17	- 0 (0%)
14	Victim	17	▼ -2 (-12%)
15	Advertising	16	▼ -4 (-25%)
16	Operation	12	▼ -2 (-17%)
17	Email	12	▼ -6 (-50%)
18	intelligence	12	▼ -5 (-42%)
19	c&c	12	▼ -1 (-8%)
20	Ransomware	11	- 0 (0%)
21	IoC	10	- 0 (0%)
22	Criminal	9	▼ -3 (-33%)
23	Software	9	▼ -10 (-111%)
24	Kaspersky	9	▲ 2 (22%)
25	CVE	9	▲ 4 (44%)
26	China	8	▲ 2 (25%)
27	Russia	8	▲ 3 (38%)
28	hijack	7	▲ 6 (86%)
29	CVSS	6	▼ -1 (-17%)
30	ZeroDay	6	▲ 1 (17%)
31	Telegram	6	▲ 4 (67%)
32	Linux	6	▲ 3 (50%)
33	file	5	▲ 3 (60%)
34	FortiGate	5	▲ new
35	GitHub	5	▼ -4 (-80%)
36	powershell	5	▼ -2 (-40%)
37	Fortinet	5	▲ 3 (60%)
38	Java	5	▼ -1 (-20%)
39	North Korea	5	▲ 2 (40%)
40	Browser	5	▼ -3 (-60%)
41	AI	5	- 0 (0%)
42	Cryptocurrency	5	▲ 1 (20%)
43	Government	5	▲ 3 (60%)
44	GameoverP2P	5	- 0 (0%)
45	Ucraina	4	▲ new
46	malicious	4	▼ -2 (-50%)
47	Check Point	4	▲ 3 (75%)
48	Australia	4	▲ new
49	United Kingdom	4	▲ 3 (75%)
50	Education	4	▼ -5 (-125%)
51	hacking	4	▼ -2 (-50%)
52	access	4	▲ 1 (25%)
53	Cisco	4	▲ 3 (75%)
54	Android	4	▼ -1 (-25%)
55	Hijacking	4	▲ new
56	Social Engineering	4	▼ -4 (-100%)
57	Password	4	▼ -5 (-125%)
58	EDR	4	- 0 (0%)
59	NetWireRC	4	▼ -1 (-25%)
60	Cobalt Strike	4	- 0 (0%)
61	Vawtrak	4	▲ 2 (50%)
62	DDoS	3	▲ 1 (33%)
63	Supply chain	3	▼ -3 (-100%)
64	DYEPACK	3	▲ 1 (33%)
65	Zero Trust	3	▲ 2 (67%)
66	PoC	3	▲ 1 (33%)
67	Twitter	3	▼ -3 (-100%)
68	Anonymous	3	▲ new
69	DNS	3	- 0 (0%)
70	Backdoor	3	▼ -4 (-133%)
71	LinkedIn	3	▼ -2 (-67%)
72	Distribution	3	▼ -4 (-133%)
73	Iran	3	▲ new
74	Stealer	3	▼ -1 (-33%)
75	Taiwan	3	▲ 2 (67%)
76	Google	3	▼ -9 (-300%)
77	Chrome	3	- 0 (0%)
78	Europe	3	▲ new
79	VirusTotal	3	- 0 (0%)
80	plugin	3	▼ -1 (-33%)
81	WordPress	3	▲ 1 (33%)
82	arrest	3	▲ 2 (67%)
83	Threat	3	▼ -3 (-100%)
84	VBScript	3	▲ 2 (67%)
85	WhatsApp	3	▲ 1 (33%)
86	VPN	2	▼ -1 (-50%)
87	OttoKit	2	▲ new
88	RAT	2	- 0 (0%)
89	traffic	2	▲ new
90	harmless	2	▲ new
91	wordfence	2	▲ 1 (50%)
92	Zscaler	2	▲ new
93	Trojan	2	▼ -4 (-200%)
94	MWNEWS	2	▲ new
95	MFA	2	▼ -2 (-100%)
96	RATel	2	▼ -4 (-200%)
97	Apple	2	- 0 (0%)
98	Symbolic	2	▲ new
99	Link	2	▲ 1 (50%)
100	Smishing	2	▲ new

Special keyword group

Top 5

Malware Type

This is the type of malware that is becoming an issue.

Keyword	Average	Label
Ransomware		11 (33.3%)
GameoverP2P		5 (15.2%)
NetWireRC		4 (12.1%)
Vawtrak		4 (12.1%)
DYEPACK		3 (9.1%)

Attacker & Actors

The status of the attacker or attack group being issued.

Keyword	Average	Label
Anonymous		3 (75%)
Lazarus		1 (25%)

Technique

This is an attack technique that is becoming an issue.

Keyword	Average	Label
Exploit		36 (27.5%)
Campaign		21 (16%)
RCE		20 (15.3%)
Phishing		19 (14.5%)
hijack		7 (5.3%)

Country & Company

This is a country or company that is an issue.

Keyword	Average	Label
Microsoft		21 (16.8%)
United States		18 (14.4%)
Kaspersky		9 (7.2%)
China		8 (6.4%)
Russia		8 (6.4%)

Threat info

Last 5

SNS

(Total : 22)

Total keyword

Attacker Vulnerability Update CVE Exploit Fortinet Report Malware attack Ransomware hacking Email CVSS Criminal Advertising Password PoC schtasks XSS Windows ChatGPT MFA Phishing ZeroDay RCE powershell North Korea Microsoft Hijacking Victim Campaign Cryptocurrency dprk Lazarus hijack plugin ...

No	Title	Date
1	Cyber_OSINT @Cyber_O51NT A vulnerability, CVE-2025-24054, related to NTLM hash disclosure via spoofing has been actively exploited since March 19, 2025, allowing attackers to leak user passwords, despite a patch released just days earlier. #CyberSecurity #NTLM https://t.co/89kUTVNtR6	2025.04.17
2	The Hacker News @TheHackersNews ???? One task away from total takeover? 4 local privilege escalation flaws found in schtasks.exe—a core part of Windows Task Scheduler. Attackers can: • Bypass UAC • Run SYSTEM-level commands • Erase security logs • Impersonate admins using known passwords. Fix not yet https://t.co/jtm4oCZbNC	2025.04.16
3	Kaspersky @kaspersky Discover how attackers use the polyglot technique to hide malware in a seemingly harmless file ???? https://t.co/KVoBquc60H https://t.co/mmF5DVrlvk	2025.04.16
4	Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer ????CVE-2025-29471: Stored XSS PoC Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field. Credit: https://t.co/70CmkIBkSf https://t.co/IWoUeJzVIL	2025.04.15
5	The Hacker News @TheHackersNews ???? Alert — A 9.0 CVSS flaw in Gladinet’s CentreStack also affects Triofox—both used for remote access. Attackers exploited it as a zero-day in March, hitting 7 orgs by April 11. ???? Root cause: Hardcoded crypto keys → enabled RCE via PowerShell + DLL sideloading ???? Read: https://t.co/w6EXAZH	2025.04.15

News

(Total : 53)

Total keyword

Attacker Malware Exploit Report Update Vulnerability attack Campaign Microsoft RCE Phishing United States target Windows Victim Advertising Operation intelligence c&c Email IoC Ransomware Kaspersky Software Russia China Criminal hijack Telegram Linux Browser GitHub Government GameoverP2P Java ZeroDay powershell Vawtrak Australia Cryptocurrency North Korea Cisco NetWireRC United Kingdom Ucraina Social Engineering Education CVSS EDR Android Check Point Cobalt Strike Zero Trust WhatsApp Google Backdoor Taiwan Distribution Anonymous Twitter VirusTotal DDoS Europe DNS LinkedIn VBScript Supply chain DYEPACK Hijacking arrest Chrome CVE Iran Stealer hacking WMI Israel Smishing plugin Canada WordPress IcedID Zscaler Deface VPN Router RAT RATel PoC Downloader Apple YouTube Sliver The Shadow Brokers South Korea ...

No	Title	Date
1	Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis - Unit 42	2025.04.17
2	Hi, robot: Half of all internet traffic now automated - Malware.News	2025.04.17
3	Exploiting SMS: Threat Actors Use Social Engineering to Target Companies - Malware.News	2025.04.17
4	6,000 WordPress Sites Affected by Arbitrary File Move Vulnerability in Drag and Drop Multiple File Upload for WooCommerce WordPress Plugin - Malware.News	2025.04.17
5	Experts Uncover Four New Privilege Escalation Flaws in Windows Task Scheduler - The Hacker News	2025.04.17

Additional information

No	Title	Date
1	엔디비아 'AI 심장부' GPU에 보안 구멍.. '즉시 패치' 비상 - 시큐리티팩트	2025.04.17
2	Hi, robot: Half of all internet traffic now automated - Malware.News	2025.04.17
3	Zoom Sees Outage With 50,000 Users Reporting Availability Issues - Bloomberg Technology	2025.04.17
4	Nude photos and names: KU Health and Kansas hospital sued for data breach - Malware.News	2025.04.17
5	DeepSeek Poses ‘Profound’ Security Threat, US House Panel Claims - Bloomberg Technology	2025.04.17
View only the last 5

No	Title	Date
1	Exploiting SMS: Threat Actors Use Social Engineering to Target Companies - Malware.News	2025.04.17
2	Wars without Gun Smoke: China Plays the Cyber Name-and-Shame Game on Taiwan and the U.S - Malware.News	2025.04.17
3	Latest Mustang Panda Arsenal: ToneShell and StarProxy \| P1 - Malware.News	2025.04.17
4	CVE-2025-24054, NTLM Exploit in the Wild - Malware.News	2025.04.16
5	CVE-2025-24054, NTLM Exploit in the Wild - Malware.News	2025.04.16
View only the last 5

No data

No	URL	CC	ASN Co	Reporter	Date
1	https://ama.resourcegate.lol/scar/attacker attacker	US	CLOUDFLARENET	abus3reports	2024.08.10
2	https://ama.cuisineupdates.online/scar/attacker attacker	US		abus3reports	2024.08.10
3	https://clp.resourcegate.lol/scar/attacker attacker	US	CLOUDFLARENET	abus3reports	2024.08.10
4	https://ama.businesshub.pics/scar/attacker attacker	US		abus3reports	2024.08.10
5	https://clp.newtech.lol/scar/attacker attacker	US		abus3reports	2024.08.10
View only the last 5

Beta Service, If you select keyword, you can check detailed information.