Cyber Threat Trends

First reported date: 2012/02/10
Inquiry period : 2025/04/16 10:18 ~ 2025/04/17 10:18 (1 days), 1 search results

지난 7일 기간대비 100% 높은 트렌드를 보이고 있습니다.
지난 7일 기간대비 상승한 Top5 연관 키워드는 PlugX 입니다.
악성코드 유형 Trojan GameoverP2P TONESHELL 도 새롭게 확인됩니다.
공격기술 Dropper hijack Backdoor Exploit 도 새롭게 확인됩니다.
기관 및 기업 Microsoft Zscaler Kaspersky 도 새롭게 확인됩니다.
기타 Cobalt Strike Update driver SplatCloak Operation 등 신규 키워드도 확인됩니다.

RSA describes PlugX as a RAT (Remote Access Trojan) malware family that is around since 2008 and is used as a backdoor to control the victim's machine fully. Once the device is infected, an attacker can remotely execute several kinds of commands on the affected system.

Notable features of this malware family are the ability to execute commands on the affected machine to retrieve:
machine information
capture the screen
send keyboard and mouse events
keylogging
reboot the system
manage processes (create, kill and enumerate)
manage services (create, start, stop, etc.); and
manage Windows registry entries, open a shell, etc.

The malware also logs its events in a text log file.  Ref.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/17 Latest Mustang Panda Arsenal: PAKLOG, CorKLOG, and SplatCloak | P2


참고로 동일한 그룹의 악성코드 타입은 Remcos njRAT QuasarRAT 등 110개 종이 확인됩니다.