Cyber Threat Trends

First reported date: 2020/09/22
Inquiry period : 2025/05/05 13:11 ~ 2025/05/06 13:11 (1 days), 1 search results

지난 7일 기간대비 신규 트렌드를 보이고 있습니다.
악성코드 유형 WannaCry BianLian BlackCat WannaCryptor ShadowPad PlugX Ransomware BlackSuit LockBit RedCurl 도 새롭게 확인됩니다.
공격기술 Campaign 도 새롭게 확인됩니다.
기관 및 기업 Check Point Fortinet Paloalto Taiwan China Microsoft United States 도 새롭게 확인됩니다.
기타 EDR Palo Alto 팔로알토 MimiKatz KillAV 등 신규 키워드도 확인됩니다.

ALPHV, also known as BlackCat or Noberus, is a ransomware family that is deployed as part of Ransomware as a Service (RaaS) operations. ALPHV is written in the Rust programming language and supports execution on Windows, Linux-based operating systems (Debian, Ubuntu, ReadyNAS, Synology), and VMWare ESXi. ALPHV is marketed as ALPHV on cybercrime forums, but is commonly called BlackCat by security researchers due to an icon of a black cat appearing on its leak site. ALPHV has been observed being deployed in ransomware attacks since November 18, 2021.

ALPHV can be configured to encrypt files using either the AES or ChaCha20 algorithms. In order to maximize the amount of ransomed data, ALPHV can delete volume shadow copies, stop processes and services, and stop virtual machines on ESXi servers. ALPHV can self-propagate by using PsExec to remote execute itself on other hosts on the local network.  Ref.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/05/06 Ransomware Tool Matrix Project Updates: May 2025


참고로 동일한 그룹의 악성코드 타입은 WannaCry Sodinokibi Phobos 등 79개 종이 확인됩니다.