Cyber Threat Trends

Summary: 2025/04/28 19:37

First reported date: 2008/01/07
Inquiry period : 2025/03/29 19:37 ~ 2025/04/28 19:37 (1 months), 494 search results

전 기간대비 16% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Exploit Vulnerability attack Update Report 입니다.
공격자 UNC5221 Kimsuky 도 새롭게 확인됩니다.
기타 file CrushFTP Connect April 신규 키워드도 확인됩니다.

* 최근 뉴스기사 Top3:
    ㆍ 2025/04/28 28th April – Threat Intelligence Report
    ㆍ 2025/04/28 Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised
    ㆍ 2025/04/28 The 2026 FIFA World Cup is coming to North America, and so are the ticket scams

Date range button:

First seen:

Last seen:

Keyword

Trend graph by period

Related keyword cloud

Top 100

#	Trend	Count	Comparison
1	Exploit	494	▲ 80 (16%)
2	Malware	244	▼ -9 (-4%)
3	Vulnerability	186	▲ 19 (10%)
4	attack	178	▲ 12 (7%)
5	Update	156	▲ 9 (6%)
6	Report	141	▲ 15 (11%)
7	target	117	▼ -13 (-11%)
8	Campaign	98	▼ -7 (-7%)
9	ZeroDay	81	▲ 8 (10%)
10	RCE	77	▲ 69 (90%)
11	United States	72	▼ -5 (-7%)
12	intelligence	71	▼ -7 (-10%)
13	Microsoft	69	▼ -8 (-12%)
14	Phishing	68	▼ -11 (-16%)
15	Advertising	65	▼ -3 (-5%)
16	Windows	64	▼ -10 (-16%)
17	Ransomware	63	▲ 5 (8%)
18	Software	62	▼ -4 (-6%)
19	Operation	61	▼ -15 (-25%)
20	Google	56	▲ 5 (9%)
21	Criminal	54	▼ -12 (-22%)
22	hacking	52	▲ 11 (21%)
23	Email	46	▼ -17 (-37%)
24	CISA	46	▲ 10 (22%)
25	threat	45	▲ 16 (36%)
26	Victim	44	▼ -25 (-57%)
27	CVSS	40	▲ 8 (20%)
28	CVE	39	▲ 1 (3%)
29	Remote Code Execution	37	▼ -83 (-224%)
30	China	37	▼ -4 (-11%)
31	securityaffairs	35	▲ 18 (51%)
32	flaw	34	▲ 23 (68%)
33	Government	33	▼ -12 (-36%)
34	Education	32	▼ -18 (-56%)
35	Kaspersky	32	▼ -9 (-28%)
36	Android	27	▼ -3 (-11%)
37	MWNEWS	27	▲ 8 (30%)
38	Password	27	- 0 (0%)
39	GitHub	27	▼ -7 (-26%)
40	Critical	26	▲ 12 (46%)
41	Ivanti	26	▲ 24 (92%)
42	VPN	26	▲ 11 (42%)
43	Linux	26	▲ 4 (15%)
44	Browser	24	▼ -1 (-4%)
45	c&c	24	▲ 8 (33%)
46	Apple	23	▲ 11 (48%)
47	Social Engineering	23	▲ 6 (26%)
48	Russia	22	▼ -14 (-64%)
49	Backdoor	22	▼ -9 (-41%)
50	IoC	21	- 0 (0%)
51	MFA	17	▼ -15 (-88%)
52	access	17	▲ 6 (35%)
53	WordPress	17	▲ 14 (82%)
54	hijack	16	▲ 2 (13%)
55	Supply chain	16	▼ -13 (-81%)
56	Stealer	16	▼ -20 (-125%)
57	DarkWeb	16	▼ -14 (-88%)
58	Chrome	16	▼ -8 (-50%)
59	plugin	16	▲ 11 (69%)
60	Cisco	16	▼ -14 (-88%)
61	group	16	▲ 9 (56%)
62	powershell	15	▼ -3 (-20%)
63	Japan	15	▲ 1 (7%)
64	GameoverP2P	15	▼ -2 (-13%)
65	Distribution	15	▼ -3 (-20%)
66	US	14	▲ 5 (36%)
67	payment	13	▼ -4 (-31%)
68	South Korea	13	▲ 10 (77%)
69	DNS	13	▲ 5 (38%)
70	LinkedIn	13	▼ -2 (-15%)
71	Mandiant	13	▲ 9 (69%)
72	Code	13	- 0 (0%)
73	Trojan	12	▼ -2 (-17%)
74	ios	12	▲ 11 (92%)
75	ESET	12	▲ 1 (8%)
76	AI	12	▼ -1 (-8%)
77	APT	12	▲ 6 (50%)
78	Cryptocurrency	12	▼ -16 (-133%)
79	file	11	▲ new
80	UNC5221	11	▲ new
81	Vawtrak	11	▲ 4 (36%)
82	Takedown	11	▼ -5 (-45%)
83	EDR	11	▼ -3 (-27%)
84	exploitation	10	▼ -4 (-40%)
85	NIST	10	▲ 6 (60%)
86	ChatGPT	10	▲ 1 (10%)
87	DYEPACK	10	▼ -5 (-50%)
88	Kimsuky	10	▲ new
89	CrushFTP	10	▲ new
90	Telegram	10	▼ -10 (-100%)
91	Secure	10	▲ 9 (90%)
92	DDoS	10	▼ -3 (-30%)
93	cloud	10	▲ 3 (30%)
94	United Kingdom	9	- 0 (0%)
95	Fortinet	9	- 0 (0%)
96	Connect	9	▲ new
97	Java	9	▼ -6 (-67%)
98	NetWireRC	9	▼ -7 (-78%)
99	detection	9	▲ 1 (11%)
100	April	8	▲ new

Special keyword group

Top 5

Malware Type

This is the type of malware that is becoming an issue.

Keyword	Average	Label
Ransomware		63 (53.8%)
GameoverP2P		15 (12.8%)
Trojan		12 (10.3%)
Vawtrak		11 (9.4%)
DYEPACK		10 (8.5%)

Attacker & Actors

The status of the attacker or attack group being issued.

Keyword	Average	Label
UNC5221		11 (52.4%)
Kimsuky		10 (47.6%)

Technique

This is an attack technique that is becoming an issue.

Keyword	Average	Label
Exploit		494 (53%)
Campaign		98 (10.5%)
RCE		77 (8.3%)
Phishing		68 (7.3%)
hacking		52 (5.6%)

Country & Company

This is a country or company that is an issue.

Keyword	Average	Label
United States		72 (13.7%)
Microsoft		69 (13.1%)
Google		56 (10.6%)
CISA		46 (8.7%)
China		37 (7%)

Threat info

Last 5

SNS

(Total : 223)

Total keyword

Exploit attack Vulnerability Malware hacking ZeroDay Update Report Attacker Campaign Ransomware target CISA Windows Phishing RCE Criminal CVE Microsoft US United States Google Android APT Apple Government China CVSS Japan Linux Email VPN Operation Kaspersky Kimsuky WordPress Chrome Advertising Remote Code Execution South Korea unc5221 Victim Russia plugin Cisco Password Fortinet Software hijack Social Engineering Browser BlueKeep Targeted Education EDR DNS Mandiant ESET ...

No	Title	Date
1	The Hacker News @TheHackersNews ???? 13,000+ sites at risk. Hackers are actively exploiting 2 zero-days in Craft CMS, hitting servers via image tools. One flaw scores 10.0 CVSS—worst possible. Nearly 300 sites likely breached already. Watch for POST hits to "/actions/assets/generate-transform" ???? Details: https://t.co/26th3b4	2025.04.28
2	Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer Exploit: https://t.co/naSTTKaWDe	2025.04.27
3	Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer ???????????? Alleged Breach of Bagmati Province Public Service Commission (PPSC) A threat actor claims to be selling exploit access to the Province Public Service Commission (PPSC) of Bagmati Province, Nepal — allowing mass file downloads. ???? Target: Province Public Service Commission https://t.	2025.04.26
4	Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer ????Alleged Sale of Arbitrum Bridge Exploit Price: 100,000$ https://t.co/HiqMljNkE4	2025.04.26
5	Cyber_OSINT @Cyber_O51NT JPCERT warns of DslogdRAT malware exploiting a patched flaw in Ivanti Connect Secure, allowing remote code execution and targeting Japanese organizations, while also linked to the APT Silk Typhoon. #CyberSecurity #Malware https://t.co/LdcjAxvite	2025.04.26

News

(Total : 271)

Total keyword

Exploit Malware Vulnerability Update attack Report Attacker target Campaign intelligence RCE United States Advertising Software Microsoft Operation Phishing ZeroDay Windows Google Ransomware Victim Email Criminal Remote Code Execution CVSS Education China GitHub CISA Kaspersky CVE c&c Government Password Backdoor IoC Browser Social Engineering VPN Linux Russia Android MFA hacking GameoverP2P Supply chain Stealer powershell DarkWeb Distribution LinkedIn Apple payment hijack plugin Trojan Cisco NIST DYEPACK WordPress DNS Cryptocurrency ChatGPT Mandiant Vawtrak Takedown Java Chrome ESET DDoS Twitter Telegram PoC United Kingdom EDR Recorded Future Firmware Check Point MacOS Europe VirusTotal South Korea WhatsApp Smishing Ucraina arrest patch RATel ...

No	Title	Date
1	28th April – Threat Intelligence Report - Malware.News	2025.04.28
2	Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised - The Hacker News	2025.04.28
3	The 2026 FIFA World Cup is coming to North America, and so are the ticket scams - Malware.News	2025.04.28
4	Gamers Beware! New Attack Targets Gamers to Deploy AgeoStealer Malware - Malware.News	2025.04.26
5	Threat Hunting: For what, when, and how? - Malware.News	2025.04.26

Additional information

No	Title	Date
1	Top Tier Target \| What It Takes to Defend a Cybersecurity Company from Today’s Adversaries - Malware.News	2025.04.28
2	28th April – Threat Intelligence Report - Malware.News	2025.04.28
3	Navigating Through The Fog - Malware.News	2025.04.28
4	Huawei Set to Test Powerful AI Chip to Rival Nvidia’s, WSJ Says - Bloomberg Technology	2025.04.28
5	Gamers Beware! New Attack Targets Gamers to Deploy AgeoStealer Malware - Malware.News	2025.04.26
View only the last 5

No	Title	Date
1	28th April – Threat Intelligence Report - Malware.News	2025.04.28
2	28th April – Threat Intelligence Report - Malware.News	2025.04.28
3	28th April – Threat Intelligence Report - Malware.News	2025.04.28
4	The 2026 FIFA World Cup is coming to North America, and so are the ticket scams - Malware.News	2025.04.28
5	Threat Hunting: For what, when, and how? - Malware.News	2025.04.26
View only the last 5

No data

No	URL	CC	ASN Co	Reporter	Date
1	http://091.sh/shell/coco.zip exploit php shell	US	CNSERVERS	Ash_XSS_1	2025.02.19
2	https://onge.org/software/WAV_Phoneme_Data_Copier.zip exploit zip	US	CLOUDFLARENET	abus3reports	2024.12.09
3	http://87.120.84.38/txt/yugozxcvb.doc CVE_2018_0798 exploit RTF	BG	Sharcom Ltd.	Riordz	2024.10.18
4	http://146.56.118.137/m8.bin exploit marte	JP		abus3reports	2024.10.18
5	http://91.92.246.65:8000/a9021da exploit opendir xml	BG	Natskovi & Sie Ltd.	abus3reports	2024.09.29
View only the last 5

Beta Service, If you select keyword, you can check detailed information.