popup

Cyber Threat Trends

  1. Day Month

Gemelli flickerflypro flickerfly

Summary: 2025/05/04 03:57

First reported date: 2024/06/11
Inquiry period : 2025/04/27 03:57 ~ 2025/05/04 03:57 (7 days), 3 search results

전 기간대비 신규 트렌드를 보이고 있습니다.
악성코드 유형 NetWireRC CrimsonRAT ElizaRAT 도 새롭게 확인됩니다.
공격기술 APT Campaign 도 새롭게 확인됩니다.
기타 apt36 TransparentTribe Malware IoC File 등 신규 키워드도 확인됩니다.

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1apt36 3 ▲ new
2TransparentTribe 3 ▲ new
3NetWireRC 3 ▲ new
4Malware 2 ▲ new
5IoC 2 ▲ new
6File 2 ▲ new
7CrimsonRAT 2 ▲ new
8APT 2 ▲ new
9Audit 1 ▲ new
10Objections 1 ▲ new
11MD5 1 ▲ new
12ElizaRAT 1 ▲ new
13VBA 1 ▲ new
14script 1 ▲ new
15Campaign 1 ▲ new
16Infra 1 ▲ new
17server 1 ▲ new
18securenesstcom 1 ▲ new
19httpsexpressholidayscoinupsrphp 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
NetWireRC
3 (50%)
CrimsonRAT
2 (33.3%)
ElizaRAT
1 (16.7%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

No data.

Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
APT
2 (66.7%)
Campaign
1 (33.3%)
Country & Company
Country & Company

This is a country or company that is an issue.

No data.

Threat info
Last 5

SNS

(Total : 3)
  Total keyword

NetWireRC Malware IoC CrimsonRAT APT ElizaRAT Campaign

No Title Date
1Cyber Team @Cyberteam008
[2/2] Infra: 185.235.137.195:3311 185.235.137.195:3309 server1.securenesst.com securenesst.com https://expressholidays.co.in/ups/r.php @500mk500 #APT36 #TransparentTribe #CrimsonRAT #Malware #ioc		2025.05.02
2Cyber Team @Cyberteam008
[1/2] #APT36 / #TransparentTribe 's #CrimsonRAT Campaign through HTML Frame attack File: presentation.accdb (it executes a VBA script) 30908d3c69dc8aaa0368b3a3593eb66c File: Syssm.exe (dropped by VBA script from "expressholidays.co.in") e948aa916d1f9f9b5bba72ad7de7e27f https://t.co/SdxeBrj6a7		2025.05.02
3Cyber Team @Cyberteam008
#APT36 / #TransparentTribe dropping #ElizaRAT using CPL (Control Panel) file. File: Audit Objection's Document.rar (Pass-protected hosted on G-Drive) MD5: e7152c45fb4c2df442ef069d30daca40 File: Audit Objection's Document.cpl MD5: 0f527665709f76a34b5612829293c849 #Malware #ioc https://t.co/L7VoycI		2025.04.30

News

(Total : 0)

No data.

Additional information

No data
No data
No data
No data
No data
Beta Service, If you select keyword, you can check detailed information.