popup

Cyber Threat Trends

  1. Day Month

conference CrowdStrike 북한

Summary: 2025/04/19 12:14

First reported date: 2013/05/20
Inquiry period : 2025/04/12 12:14 ~ 2025/04/19 12:14 (7 days), 12 search results

전 기간대비 50% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Fake Campaign target Microsoft 입니다.
악성코드 유형 NetWireRC SectopRAT RAT 도 새롭게 확인됩니다.
공격기술 Phishing hijack Smishing ClickFix RCE Hijacking 도 새롭게 확인됩니다.
기관 및 기업 United States Binance North Korea Japan dprk South Korea China 도 새롭게 확인됩니다.
기타 Crypto Follow exchange amp payment 등 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/16 “Follow me” to this fake crypto exchange to claim $500
    ㆍ 2025/04/16 “Follow me” to this fake crypto exchange to claim $500

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1Fake 12 ▲ 6 (50%)
2Campaign 4 ▲ 3 (75%)
3Malware 3 ▼ -1 (-33%)
4Phishing 3 ▲ new
5Crypto 3 ▲ new
6target 3 ▲ 1 (33%)
7Follow 2 ▲ new
8NetWireRC 2 ▲ new
9exchange 2 ▲ new
10Microsoft 2 ▲ 1 (50%)
11United States 2 ▲ new
12hijack 2 ▲ new
13amp 2 ▲ new
14payment 2 ▲ new
15Alert 2 ▲ new
16Criminal 1 - 0 (0%)
17Python 1 - 0 (0%)
18Smishing 1 ▲ new
19Texts 1 ▲ new
20EZPass 1 ▲ new
21lucky 1 ▲ new
22AI 1 ▲ new
23tool 1 ▲ new
24Gamma 1 ▲ new
25Binance 1 ▲ new
26Report 1 ▲ new
27ClickFix 1 ▲ new
28toll 1 ▲ new
29SectopRAT 1 ▲ new
30WhatsApp 1 ▲ new
31Browser 1 ▲ new
32RCE 1 ▲ new
33Password 1 ▲ new
34powershell 1 ▲ new
35NodejsPowered 1 ▲ new
36sponsored 1 ▲ new
37Thousands 1 ▲ new
38reward 1 ▲ new
39account 1 - 0 (0%)
40itworker 1 ▲ new
41devs 1 ▲ new
42attack 1 ▼ -1 (-100%)
43cti 1 ▲ new
44North 1 ▲ new
45Korean 1 ▲ new
46Workers 1 ▲ new
47North Korea 1 ▲ new
48Software 1 ▲ new
49KIChatbots 1 ▲ new
50und 1 ▲ new
51füttert 1 ▲ new
52Russland 1 ▲ new
53realtime 1 ▲ new
54highvalue 1 ▲ new
55login 1 ▲ new
56Email 1 ▲ new
57pastehijacking 1 ▲ new
58Japan 1 ▲ new
59United 1 ▲ new
60IRS 1 ▲ new
61FQDNs 1 ▲ new
62Hijacking 1 ▲ new
63Russia 1 - 0 (0%)
64Kaspersky 1 - 0 (0%)
65ThreatProtection 1 ▲ new
66cybercrime 1 ▲ new
67spyware 1 ▲ new
68MissAV 1 ▲ new
69SpyNote 1 ▲ new
70RAT 1 ▲ new
71dprk 1 ▲ new
72South Korea 1 ▲ new
73China 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
NetWireRC
2 (50%)
SectopRAT
1 (25%)
RAT
1 (25%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

No data.

Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
Campaign
4 (30.8%)
Phishing
3 (23.1%)
hijack
2 (15.4%)
Smishing
1 (7.7%)
ClickFix
1 (7.7%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
Microsoft
2 (16.7%)
United States
2 (16.7%)
Binance
1 (8.3%)
North Korea
1 (8.3%)
Japan
1 (8.3%)
Threat info
Last 5

SNS

(Total : 9)
  Total keyword

Campaign target Phishing Malware Microsoft payment United States hijack NetWireRC Japan powershell SectopRAT ClickFix Binance Smishing RAT South Korea North Korea Email attack dprk Hijacking Russia Kaspersky spyware China

No Title Date
1The Hacker News @TheHackersNews
⚠️ Alert: Fake E-ZPass Texts Target Drivers in 8 U.S. States A widespread smishing scam is tricking drivers into fake toll payments to steal card info. ???? Linked to China-based Smishing Triad ???? Phishing kits sold by CS student Wang Duo Yu ???? Used in 121+ countries ???? Full https://t.co/es		2025.04.18
2The Hacker News @TheHackersNews
???? Microsoft Alert: Node.js-Powered Malware Campaign Ongoing... Since Oct 2024, fake Binance & TradingView installers have been used to deploy malware via Node.js and PowerShell. Linked threats include ClickFix tricks, SectopRAT malware, fake PDF tools, and HR-themed phishing https://t.co/0J		2025.04.17
3BleepingComputer @BleepinComputer
????Thousands tricked by fake reward & toll scam texts. CTM360 exposes PointyPhish & TollShark—SMS phishing campaigns powered by the Darcula PhaaS, with 5K+ domains stealing payment info worldwide. ???? Learn more from @teamCTM360: https://t.co/cn1PydSNPX #cybersecurity #sponsored		2025.04.17
4The Hacker News @TheHackersNews
⚠️ Hackers are abusing AI tool Gamma to craft fake presentations that lead you to spoofed Microsoft SharePoint logins—and even fake CAPTCHA pages to dodge security scans. ????Details: https://t.co/AO4Q5KKYW5		2025.04.16
5Threat Intelligence @threatintel
#ThreatProtection SpyNote RAT masquerades as a fake MissAV APK, targeting mobile users in Japan, South Korea, and beyond. Hosted on a malicious domain created after the main MissAV site was seized. https://t.co/o0V6rnx5s0 #Cybersecurity #Cybercrime #Spyware		2025.04.15

News

(Total : 3)
  Total keyword

Software Campaign Password RCE Browser WhatsApp Criminal Report Malware

No Title Date
1“Follow me” to this fake crypto exchange to claim $500 - Malware.News2025.04.16
2“Follow me” to this fake crypto exchange to claim $500 - Malwarebytes Labs2025.04.16
3Perfides LLM-Grooming: So füttert Russland KI-Chatbots mit Fake News – und keiner merkt es - IT Sicherheitsnews2025.04.13

Additional information

No data
No data
No data
No URL CC ASN Co Reporter Date
1http://romainthomas.fr/post/android-crackme/crackme-telegram.apk
apk Fake telegram 		FR FROVH SASabus3reports2024.11.03
2https://electrum-dash.org/download/electrum-dash-4.1.7.5.exe
exe Fake infostealer 		GB GBninjacatcher2024.10.07
3https://electrum-dash.org/download/electrum-dash-4.1.7.5-x86_64.AppImage
exe Fake infostealer 		GB GBninjacatcher2024.10.07
4https://electrum-dash.org/download/electrum-dash-4.1.7.5.dmg
exe Fake infostealer 		GB GBninjacatcher2024.10.07
5https://adobeacrobat.help/AdobeUpdate.pdf
Fake PDF RemoteAdmin 		kddx01783182024.09.16
View only the last 5
Beta Service, If you select keyword, you can check detailed information.