popup

Cyber Threat Trends

  1. Day Month

conference CrowdStrike 북한

Summary: 2025/04/17 13:15

First reported date: 2012/10/18
Inquiry period : 2025/04/10 13:15 ~ 2025/04/17 13:15 (7 days), 45 search results

전 기간대비 33% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Access Sale Update United States attack 입니다.
악성코드 유형 RAT Trojan njRAT NetWireRC 도 새롭게 확인됩니다.
공격기술 RCE Social Engineering Backdoor 도 새롭게 확인됩니다.
기관 및 기업 Fortinet US United Kingdom Paloalto Palo Alto Networks Russia Kaspersky Ucraina 도 새롭게 확인됩니다.
기타 FortiGate Report CVE IABs Shop 등 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/17 “I sent you an email from your email account,” sextortion scam claims
    ㆍ 2025/04/16 User with Russian IP address tried to log into NLRB systems following DOGE access, whistleblower says
    ㆍ 2025/04/15 Year in Review: The biggest trends in ransomware

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1Access 45 ▲ 15 (33%)
2Alleged 15 ▼ -1 (-7%)
3Sale 15 ▲ 1 (7%)
4Update 8 ▲ 6 (75%)
5United States 8 ▲ 2 (25%)
6Fortinet 8 ▲ new
7RCE 7 ▲ new
8attack 7 ▲ 5 (71%)
9Exploit 6 ▲ 2 (33%)
10VPN 5 ▲ 2 (40%)
11FortiGate 5 ▲ new
12Report 4 ▲ new
13Vulnerability 4 ▲ 3 (75%)
14CVE 4 ▲ new
15Malware 4 ▲ 1 (25%)
16RDP 3 ▲ 1 (33%)
17payment 3 ▲ 2 (67%)
18IABs 3 ▲ new
19unidentified 3 ▼ -4 (-133%)
20Shop 3 ▲ new
21Government 3 ▲ 1 (33%)
22target 3 - 0 (0%)
23US 3 ▲ new
24Initial 3 ▲ 2 (67%)
25Email 2 ▲ new
26FTP 2 ▲ new
27United Kingdom 2 ▲ new
28intelligence 2 ▲ 1 (50%)
29Shell 2 ▲ new
30Criminal 2 ▲ 1 (50%)
31unauthorized 2 ▼ -4 (-200%)
32threat 2 ▼ -1 (-50%)
33Software 2 - 0 (0%)
34Social Engineering 2 ▲ new
35Control 2 ▲ new
36Password 2 - 0 (0%)
37AnyDesk 2 ▲ new
38plugin 2 ▲ new
39Phishing 2 ▲ 1 (50%)
40deal 1 ▲ new
41Data Center 1 ▲ new
42Palo Alto 1 ▲ new
43Victim 1 ▲ new
44팔로알토 1 ▲ new
45Paloalto 1 ▲ new
46Zero Trust 1 - 0 (0%)
47Browser 1 - 0 (0%)
48Palo Alto Networks 1 ▲ new
49RAT 1 ▲ new
50Trojan 1 ▲ new
51httpstcoyl 1 ▲ new
52address 1 ▲ new
53account 1 - 0 (0%)
54Cryptocurrency 1 ▲ new
55coding 1 ▲ new
56Lifetime 1 ▲ new
57Canada 1 - 0 (0%)
58Nets 1 ▲ new
59Small 1 ▲ new
60Backdoor 1 ▲ new
61stealth 1 ▲ new
62plant 1 ▲ new
63Veterinary 1 ▲ new
64webapps 1 ▲ new
65Incorrect 1 ▲ new
66DLP 1 ▲ new
67njRAT 1 ▲ new
68NetWireRC 1 ▲ new
69Argentina 1 ▲ new
70sensitive 1 ▲ new
71Advertising 1 ▲ new
72ltpgt 1 ▲ new
73ltpgtThe 1 ▲ new
74Russia 1 ▲ new
75Media 1 ▲ new
76Kaspersky 1 ▲ new
77Review 1 ▲ new
78Ransomware 1 - 0 (0%)
79Router 1 ▲ new
80Ucraina 1 ▲ new
81Revenue 1 - 0 (0%)
82WebMethods 1 ▲ new
83Operation 1 ▼ -1 (-100%)
84Integration 1 ▲ new
85Server 1 ▲ new
86Improper 1 ▲ new
87limitless 1 ▲ new
88Sorry 1 ▲ new
89Retail 1 ▲ new
90ZoomInfo 1 ▲ new
91h4rmsw4yX 1 ▲ new
92much 1 ▲ new
93federal 1 ▲ new
94Prisma 1 ▲ new
95DOGE 1 ▲ new
96OpenPanel 1 ▲ new
97vulnerable 1 ▲ new
98MikroTik 1 ▲ new
99realworld 1 ▲ new
100GeoVision 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
RAT
1 (20%)
Trojan
1 (20%)
njRAT
1 (20%)
NetWireRC
1 (20%)
Ransomware
1 (20%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

Keyword Average Label
Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
RCE
7 (38.9%)
Exploit
6 (33.3%)
Social Engineering
2 (11.1%)
Phishing
2 (11.1%)
Backdoor
1 (5.6%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
United States
8 (21.1%)
Fortinet
8 (21.1%)
Government
3 (7.9%)
US
3 (7.9%)
United Kingdom
2 (5.3%)
Threat info
Last 5

SNS

(Total : 35)
  Total keyword

United States Fortinet Update RCE attack Exploit VPN US Attacker Vulnerability CVE Report plugin target AnyDesk United Kingdom payment Indonesia Backdoor Social Engineering Router Ucraina Canada Spain Phishing Trend Micro Italy Africa Banking GitHub UK Supply chain Android India ...

No Title Date
1Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer
???????????? Alleged Access Sale – Argentinian Media Firm ($100M Revenue) A threat actor is allegedly selling AnyDesk access to a media company in Argentina with reported revenue over $100 million. ???? Country: Argentina ???? Industry: Media ???? Revenue: +$100M ???? Access type: AnyDesk ???? htt		2025.04.16
2Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer
???????????? Alleged RDP Access for Dutch Retail Firm – $5M+ ZoomInfo A cybercriminal is allegedly auctioning RDP access to a Netherlands-based retail company with over $5M in revenue and domain user privileges. ???? Country: Netherlands ???? Industry: Retail ???? Revenue: $5M+ (ZoomInfo) ???? htt		2025.04.16
3BleepingComputer @BleepinComputer
Lifetime access to 15 coding courses is down to $40 in this deal https://t.co/yl3OaMm5GE https://t.co/yl3OaMm5GE		2025.04.15
4MalwareHunterTeam @malwrhunterteam
@h4rmsw4yX Sorry, I not have much access (nor think I ever will as it would be too damaging for some it seems... ????‍♂️) to do limitless testings, so can't really tell. Maybe just start from all .hta files seen from Ukraine and if that gives too much FPs, try to filter more based on what easily		2025.04.15
5Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer
???? Alleged MikroTik Router Access for Sale (VPN / SOCKS5) A threat actor is allegedly selling access to MikroTik RouterOS v6.49.17 devices, enabling VPN tunneling and SOCKS5 proxies. ???? Supported protocols: PPTP, SSTP, L2TP, OVPN, IPsec, SOCKS5 ???? Pricing: $75–$100 per access https://t.co/kS		2025.04.14

News

(Total : 10)
  Total keyword

Malware Update attack Software intelligence Government Password Email Exploit RCE Advertising Report Russia Kaspersky target Victim payment Trojan RAT Browser Cryptocurrency Phishing NetWireRC njRAT Ransomware Data Center Fortinet Social Engineering Criminal Vulnerability Attacker Operation CVE Palo Alto Networks Zero Trust Paloalto VPN DLP

No Title Date
1“I sent you an email from your email account,” sextortion scam claims - Malware.News2025.04.17
2[remote] WebMethods Integration Server 10.15.0.0000-0092 - Improper Access on Login Page - Exploit-DB.com2025.04.16
3User with Russian IP address tried to log into NLRB systems following DOGE access, whistleblower says - Malware.News2025.04.16
4Year in Review: The biggest trends in ransomware - Malware.News2025.04.15
5Modernizing Federal Security with Prisma Access - Malware.News2025.04.15

Additional information

No data
No data
No data
No data
Beta Service, If you select keyword, you can check detailed information.