Summary: 2025/04/17 13:12
First reported date: 2015/01/23
Inquiry period : 2025/04/10 13:12 ~ 2025/04/17 13:12 (7 days), 12 search results
전 기간대비 17% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 njRAT NetWireRC 입니다.
악성코드 유형 Trojan RAT 도 새롭게 확인됩니다.
공격기술 Phishing 도 새롭게 확인됩니다.
기타 Victim Email account overallwhomglatplygg address 등 신규 키워드도 확인됩니다.
njRAT is a remote access trojan. It is one of the most widely accessible RATs on the market that features an abundance of educational information.
Interested attackers can even find tutorials on YouTube.
* 최근 뉴스기사 Top3:
ㆍ 2025/04/17 “I sent you an email from your email account,” sextortion scam claims
ㆍ 2025/04/16 “I sent you an email from your email account,” sextortion scam claims
참고로 동일한 그룹의 악성코드 타입은 Remcos njRAT QuasarRAT 등 110개 종이 확인됩니다.
Trend graph by period
Related keyword cloud
Top 100| # | Trend | Count | Comparison |
|---|---|---|---|
| 1 | njRAT | 12 | ▲ 2 (17%) |
| 2 | NetWireRC | 12 | ▲ 2 (17%) |
| 3 | C2 | 10 | - 0 (0%) |
| 4 | c&c | 10 | - 0 (0%) |
| 5 | Victim | 2 | ▲ new |
| 6 | 2 | ▲ new | |
| 7 | account | 2 | ▲ new |
| 8 | overallwhomglatplygg | 1 | ▲ new |
| 9 | Phishing | 1 | ▲ new |
| 10 | address | 1 | ▲ new |
| 11 | access | 1 | ▲ new |
| 12 | Password | 1 | ▲ new |
| 13 | payment | 1 | ▲ new |
| 14 | Trojan | 1 | ▲ new |
| 15 | RAT | 1 | ▲ new |
| 16 | Browser | 1 | ▲ new |
| 17 | Cryptocurrency | 1 | ▲ new |
| 18 | Malware | 1 | ▲ new |
| 19 | arquivehacksddnsnet | 1 | ▲ new |
| 20 | scam | 1 | ▲ new |
| 21 | sextortion | 1 | ▲ new |
| 22 | getmetglatplygg | 1 | ▲ new |
| 23 | target | 1 | ▲ new |
| 24 | jajaovhduckdnsorg | 1 | ▲ new |
| 25 | packamberglatplygg | 1 | ▲ new |
| 26 | teachingintegrateglatplygg | 1 | ▲ new |
| 27 | DDNS | 1 | ▲ new |
| 28 | own | 1 | ▲ new |
Special keyword group
Top 5
Attacker & Actors
The status of the attacker or attack group being issued.
No data.
Technique
This is an attack technique that is becoming an issue.
| Keyword | Average | Label |
|---|---|---|
| Phishing |
|
1 (100%) |
Country & Company
This is a country or company that is an issue.
No data.
Malware Family
Top 5
A malware family is a group of applications with similar attack techniques.
In this trend, it is classified into Ransomware, Stealer, RAT or Backdoor, Loader, Botnet, Cryptocurrency Miner.
Threat info
Last 5SNS
(Total : 10)News
(Total : 2)njRAT Victim Email NetWireRC RAT Password payment Trojan Phishing Browser Cryptocurrency Malware target
| No | Title | Date |
|---|---|---|
| 1 | “I sent you an email from your email account,” sextortion scam claims - Malware.News | 2025.04.17 |
| 2 | “I sent you an email from your email account,” sextortion scam claims - Malwarebytes Labs | 2025.04.16 |
Additional information
| No | Title | Date |
|---|---|---|
| 1 | 엔디비아 'AI 심장부' GPU에 보안 구멍.. '즉시 패치' 비상 - 시큐리티팩트 | 2025.04.17 |
| 2 | Hi, robot: Half of all internet traffic now automated - Malware.News | 2025.04.17 |
| 3 | Zoom Sees Outage With 50,000 Users Reporting Availability Issues - Bloomberg Technology | 2025.04.17 |
| 4 | Nude photos and names: KU Health and Kansas hospital sued for data breach - Malware.News | 2025.04.17 |
| 5 | DeepSeek Poses ‘Profound’ Security Threat, US House Panel Claims - Bloomberg Technology | 2025.04.17 |
| View only the last 5 | ||
| No | Title | Date |
|---|---|---|
| 1 | Blind Eagle: …And Justice for All - Malware.News | 2025.03.10 |
| 2 | Blind Eagle: …And Justice for All - Malware.News | 2025.03.10 |
| 3 | Blind Eagle: …And Justice for All - Malware.News | 2025.03.10 |
| 4 | Blind Eagle: …And Justice for All - Malware.News | 2025.03.10 |
| 5 | Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool - Malware.News | 2025.03.05 |
| View only the last 5 | ||
| Level | Description |
|---|---|
| watch | Creates known Upatre files |
| watch | File has been identified by 19 AntiVirus engines on VirusTotal as malicious |
| notice | Allocates read-write-execute memory (usually to unpack itself) |
| notice | Checks for the Locally Unique Identifier on the system for a suspicious privilege |
| notice | Creates executable files on the filesystem |
| notice | Drops an executable to the user AppData folder |
| notice | One or more potentially interesting buffers were extracted |
| notice | Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation |
| notice | The binary likely contains encrypted or compressed data indicative of a packer |
| info | Checks amount of memory in system |
| info | Checks if process is being debugged by a debugger |
| info | One or more processes crashed |
| info | Queries for the computername |
| info | The file contains an unknown PE resource name possibly indicative of a packer |
| info | This executable has a PDB path |
| info | Uses Windows APIs to generate a cryptographic key |
| No | Category | URL | CC | ASN Co | Date |
|---|---|---|---|---|---|
| 1 | c2 | http://54.169.93.143:10549/ | SG  | AMAZON-02 | 2025.04.11 |
| 2 | c2 | http://18.190.63.84:11421/ | US  | AMAZON-02 | 2025.04.01 |
| 3 | c2 | http://3.137.60.53:11421/ | US | AMAZON-02 | 2025.04.01 |
| 4 | c2 | http://3.12.245.36:11421/ | US | AMAZON-02 | 2025.04.01 |
| 5 | c2 | http://3.135.250.11:11421/ | US | AMAZON-02 | 2025.04.01 |
| View only the last 5 | |||||
| No | URL | CC | ASN Co | Reporter | Date |
|---|---|---|---|---|---|
| 1 | http://github.com/MommyNikiits/NotTouchingDD/raw/master/Device2.exe njRAT | US | MICROSOFT-CORP-MSN-AS-BLOCK | abus3reports | 2025.04.13 |
| 2 | https://raw.githubusercontent.com/gamingdued123/UeukFI/main/clientside.exe github njRAT | US | FASTLY | Riordz | 2025.02.22 |
| 3 | https://github.com/BARHOM1/brobr/raw/main/WindowsServices.exe github njRAT | US | MICROSOFT-CORP-MSN-AS-BLOCK | Riordz | 2025.02.22 |
| 4 | https://raw.githubusercontent.com/kostyosthesystem/ratnik/refs/heads/main/ratnik.zip github njRAT | US | FASTLY | Riordz | 2025.02.22 |
| 5 | https://raw.githubusercontent.com/Toxicxz/Fnaf-1/refs/heads/main/fuscagame.exe github njRAT | US | FASTLY | Riordz | 2025.02.22 |
| View only the last 5 | |||||