popup

Cyber Threat Trends

  1. Day Month

conference CrowdStrike 북한

Summary: 2025/04/17 13:12

First reported date: 2011/04/26
Inquiry period : 2025/04/10 13:12 ~ 2025/04/17 13:12 (7 days), 15 search results

전 기간대비 -7% 낮은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Google Malware Browser United States Phishing 입니다.
악성코드 유형 RATel EnvyScout GraphicalNeutrino 도 새롭게 확인됩니다.
공격자 APT29 도 새롭게 확인됩니다.
공격기술 RCE hijack Smishing 도 새롭게 확인됩니다.
기관 및 기업 Russia 구글 Okta Check Point Iran Canada Australia VirusTotal 도 새롭게 확인됩니다.
기타 Report Android Sicherheitslücke kritische Safari 등 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/17 Hi, robot: Half of all internet traffic now automated
    ㆍ 2025/04/17 IT Sicherheitsnews taegliche Zusammenfassung 2025-04-16 18h : 7 posts
    ㆍ 2025/04/17 Advanced KQL Deep Dive: User State Change Tracking

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1Chrome 15 ▼ -1 (-7%)
2Google 9 ▲ 2 (22%)
3Malware 8 ▲ 3 (38%)
4Browser 7 ▲ 2 (29%)
5Update 4 ▼ -2 (-50%)
6Windows 4 - 0 (0%)
7Exploit 3 ▼ -1 (-33%)
8target 3 ▼ -1 (-33%)
9Campaign 3 - 0 (0%)
10United States 3 ▲ 2 (67%)
11Phishing 3 ▲ 1 (33%)
12Report 3 ▲ new
13Kaspersky 2 ▲ 1 (50%)
14India 2 ▲ 1 (50%)
15intelligence 2 ▲ 1 (50%)
16Android 2 ▲ new
17Firefox 2 ▼ -1 (-50%)
18Microsoft 2 ▼ -3 (-150%)
19Russia 2 ▲ new
20Victim 2 - 0 (0%)
21RCE 2 ▲ new
22Criminal 2 ▲ 1 (50%)
23hijack 2 ▲ new
24Sicherheitslücke 2 ▲ new
25kritische 2 ▲ new
26Email 2 - 0 (0%)
27Safari 2 ▲ new
28advisory 1 - 0 (0%)
29MWNEWS 1 ▲ new
30taegliche 1 ▲ new
31Sicherheitsnews 1 ▲ new
32Vulnerability 1 - 0 (0%)
33Artikel 1 - 0 (0%)
34Schwachstellen 1 ▼ -3 (-300%)
35Mehrere 1 ▼ -3 (-300%)
36개인정보 1 ▲ new
37Zusammenfassung 1 ▲ new
38브라우저 1 ▲ new
39크롬 1 ▲ new
40구글 1 ▲ new
41Ba 1 ▲ new
42Government 1 ▼ -1 (-100%)
43Advertising 1 ▼ -2 (-200%)
44기록 1 ▲ new
45payment 1 - 0 (0%)
46last 1 ▲ new
47application 1 ▲ new
48operator 1 ▲ new
49step 1 ▲ new
50user 1 ▲ new
51Okta 1 ▲ new
52RATel 1 ▲ new
53MFA 1 - 0 (0%)
54ChatGPT 1 ▲ new
55abgedichtet 1 ▲ new
56Webbrowser 1 ▲ new
57human 1 ▲ new
58dichtet 1 ▲ new
59bot 1 ▲ new
60web 1 ▲ new
61traffic 1 ▲ new
62Password 1 - 0 (0%)
63EnvyScout 1 ▲ new
64Router 1 ▲ new
65attack 1 ▼ -1 (-100%)
66Software 1 ▼ -1 (-100%)
67Education 1 ▼ -1 (-100%)
68Microsoft Edge 1 ▼ -2 (-200%)
69SideWinder 1 ▲ new
70Check Point 1 ▲ new
71Apple 1 ▼ -1 (-100%)
72history 1 - 0 (0%)
73Chromebooks 1 ▲ new
74Lenovo 1 ▲ new
75httpstcoy 1 ▲ new
76BadBazaar 1 ▲ new
77threat 1 ▲ new
78SpyNote 1 ▲ new
79RC 1 ▲ new
80WhatsApp 1 ▲ new
81Instagram 1 ▲ new
82risk 1 ▲ new
83Facebook 1 ▲ new
84arrest 1 - 0 (0%)
85Smishing 1 ▲ new
86Iran 1 ▲ new
87Canada 1 ▲ new
88Australia 1 ▲ new
89China 1 - 0 (0%)
90North Korea 1 - 0 (0%)
91Telegram 1 ▲ new
92privacy 1 ▲ new
93From 1 ▲ new
94GraphicalNeutrino 1 ▲ new
95Trojan 1 - 0 (0%)
96VMware 1 ▲ new
97c&c 1 ▼ -2 (-200%)
98IoC 1 ▼ -1 (-100%)
99VirusTotal 1 ▲ new
100APT29 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
RATel
1 (20%)
EnvyScout
1 (20%)
GraphicalNeutrino
1 (20%)
NetWireRC
1 (20%)
AsyncRAT
1 (20%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

Keyword Average Label
APT29
1 (50%)
SideCopy
1 (50%)
Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
Exploit
3 (21.4%)
Campaign
3 (21.4%)
Phishing
3 (21.4%)
RCE
2 (14.3%)
hijack
2 (14.3%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
Google
9 (29%)
United States
3 (9.7%)
Kaspersky
2 (6.5%)
India
2 (6.5%)
Microsoft
2 (6.5%)
Threat info
Last 5

SNS

(Total : 3)
  Total keyword

Chrome Browser Update

No Title Date
1MalwareHunterTeam @malwrhunterteam
"Chrome.apk": 47fb7c6c96b036ce50b6dca26157f6ac4d7b40c1059114b6b7d8eefa9c435eff From: https://www.navegador-update.com/download.php https://t.co/E3y8exqGSG		2025.04.14
2BleepingComputer @BleepinComputer
Chrome 136 fixes 20-year browser history privacy risk - @billtoulas https://t.co/j4yUJlZxrD https://t.co/j4yUJlZxrD		2025.04.13
3BleepingComputer @BleepinComputer
These refurbished Lenovo Chromebooks are now $80 https://t.co/y0GQcYkpsO https://t.co/y0GQcYkpsO		2025.04.11

News

(Total : 12)
  Total keyword

Chrome Google Malware Browser Windows target Phishing Report Campaign United States Attacker Exploit Update Criminal intelligence RCE Email Microsoft India Firefox Safari Victim Russia Android Kaspersky hijack Vulnerability 크롬 구글 Password Okta RATel MFA ChatGPT Education payment Router attack Software Government APT29 Advertising Instagram AsyncRAT WhatsApp Apple Facebook SideCopy arrest Smishing Iran Canada Australia China North Korea Telegram NetWireRC powershell Microsoft Edge EnvyScout Check Point GraphicalNeutrino VMware c&c IoC VirusTotal Distribution ...

No Title Date
1Hi, robot: Half of all internet traffic now automated - Malware.News2025.04.17
2IT Sicherheitsnews taegliche Zusammenfassung 2025-04-16 18h : 7 posts - IT Sicherheitsnews2025.04.17
3Advanced KQL Deep Dive: User State Change Tracking - Malware.News2025.04.17
4Webbrowser: Kritische Sicherheitslücke in Chrome abgedichtet - IT Sicherheitsnews2025.04.17
5Google dichtet kritische Sicherheitslücke in Chrome ab - IT Sicherheitsnews2025.04.17

Additional information

No Request Hash(md5) Report No Date
1 remcos_a.exe
Client SW User Data Stealer Backdoor RemcosRAT Browser Login Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library Malicious Packer UPX Create Service Socket Escalate priviledges PWS Sniff Audio DNS Interne 		e3aecc3188eac24edb8e34f5044b3a6a589982025.04.14
2 pdf.ps1
Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Hide_EXE Generic Malware Google Chrome User Data Downloader Malicious Library .NET framework(MSIL) Antivirus Create Service Socket ScreenShot Escalate priviledges PWS Sniff Audio DNS Inte 		642647cf863119977d7bd52e848e0cfe583952025.03.31
3 kent.ps1
Client SW User Data Stealer Backdoor RemcosRAT Formbook browser info stealer Hide_EXE Generic Malware Google Chrome User Data Downloader Malicious Library Confuser .NET Antivirus Create Service Socket ScreenShot Escalate priviledges PWS Sniff Audio DNS Co 		432719ce1459add67ebe4c01b47310f2580592025.03.13
4 nyoilsafkjawd.exe
Client SW User Data Stealer Backdoor RemcosRAT Browser Login Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library Malicious Packer UPX Create Service Socket ScreenShot Escalate priviledges PWS Sniff Audio 		0bea38a3f664f5c8d72ab74db022aacd580452025.03.12
5 crossings.exe
Client SW User Data Stealer Backdoor RemcosRAT Browser Login Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library Malicious Packer UPX Create Service Socket ScreenShot Escalate priviledges PWS Sniff Audio 		db59bfef32bc15d53bdf499dd1ae62c4580442025.03.12
View only the last 5
Level Description
danger File has been identified by 66 AntiVirus engines on VirusTotal as malicious
danger The process wscript.exe wrote an executable file to disk which it then attempted to execute
danger Connects to an IP address that is no longer responding to requests (legitimate services will remain up-and-running usually)
danger Executed a process and injected code into it
warning Disables Windows Security features
watch Communicates with host for which no DNS query was performed
watch Installs itself for autorun at Windows startup
watch One or more non-whitelisted processes were created
watch Potential code injection by writing to the memory of another process
watch Resumed a suspended thread in a remote process potentially indicative of process injection
watch Used NtSetContextThread to modify a thread in a remote process indicative of process injection
notice A process attempted to delay the analysis task.
notice A process created a hidden window
notice Checks whether any human activity is being performed by constantly checking whether the foreground window changed
notice Creates a suspicious process
notice Creates executable files on the filesystem
notice Drops a binary and executes it
notice Drops an executable to the user AppData folder
notice One or more potentially interesting buffers were extracted
notice Terminates another process
notice Uses Windows utilities for basic Windows functionality
notice Yara rule detected in process memory
info Checks amount of memory in system
info Checks if process is being debugged by a debugger
info Command line console output was observed
info The executable contains unknown PE section names indicative of a packer (could be a false positive)
No data
No URL CC ASN Co Reporter Date
1http://104.161.23.254/ChromeSetup.exe
chrome malformed 		US USSSASN2abus3reports2024.05.23
2http://94.156.6.89/chrome.apk
apk android chrome 		BG BGNET1 Ltd.anonymous2023.09.29
Beta Service, If you select keyword, you can check detailed information.