popup

Cyber Threat Trends

  1. Day Week

Gemelli flickerflypro flickerfly

Summary: 2025/04/28 20:23

First reported date: 2009/11/11
Inquiry period : 2025/03/29 20:23 ~ 2025/04/28 20:23 (1 months), 289 search results

전 기간대비 -2% 낮은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Update Exploit Software Report attack 입니다.
공격자 UNC5221 도 새롭게 확인됩니다.
공격기술 RCE 도 새롭게 확인됩니다.
기관 및 기업 CrowdStrike 도 새롭게 확인됩니다.
기타 April Artikel Shield Blue 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/28 Gmail für Android und iOS: Google sorgt für mehr Flexibilität und bringt neue Gemini-Funktionen
    ㆍ 2025/04/26 Is Detection Engineering just glorified googling?
    ㆍ 2025/04/26 Threat Hunting: For what, when, and how?

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1Google 289 ▼ -5 (-2%)
2Malware 88 ▼ -2 (-2%)
3Update 65 ▲ 3 (5%)
4Exploit 56 ▲ 5 (9%)
5Software 52 ▲ 1 (2%)
6Report 52 ▲ 5 (10%)
7attack 43 ▲ 2 (5%)
8Vulnerability 43 ▲ 10 (23%)
9target 38 ▼ -3 (-8%)
10Chrome 38 ▼ -14 (-37%)
11United States 38 ▲ 7 (18%)
12Android 36 ▼ -21 (-58%)
13Advertising 35 - 0 (0%)
14Campaign 34 ▼ -7 (-21%)
15Phishing 33 ▲ 8 (24%)
16intelligence 32 ▼ -1 (-3%)
17Email 32 ▲ 4 (13%)
18Microsoft 31 - 0 (0%)
19Browser 31 ▼ -1 (-3%)
20AI 30 ▲ 18 (60%)
21Criminal 25 ▼ -2 (-8%)
22ZeroDay 21 ▲ 2 (10%)
23Victim 19 ▼ -7 (-37%)
24Gmail 18 ▲ 7 (39%)
25Windows 18 ▼ -3 (-17%)
26Mandiant 17 ▲ 10 (59%)
27China 17 - 0 (0%)
28Operation 16 ▼ -6 (-38%)
29threat 15 ▲ 10 (67%)
30Remote Code Execution 15 ▼ -11 (-73%)
31Government 14 ▼ -1 (-7%)
32Kaspersky 14 ▼ -8 (-57%)
33Education 13 - 0 (0%)
34ChatGPT 13 ▼ -10 (-77%)
35RCE 13 ▲ new
36Cloud 13 ▲ 4 (31%)
37Ransomware 12 ▲ 3 (25%)
38Schwachstellen 12 ▲ 2 (17%)
39Russia 12 ▼ -9 (-75%)
40Lobshot 12 ▲ 4 (33%)
41Sicherheitsnews 11 ▼ -11 (-100%)
42Password 11 ▼ -4 (-36%)
43Mehrere 11 ▲ 8 (73%)
44VPN 11 ▲ 4 (36%)
45taegliche 10 ▼ -8 (-80%)
46hacking 10 ▼ -11 (-110%)
47구글 10 ▲ 7 (70%)
48Zusammenfassung 10 ▼ -12 (-120%)
49North Korea 10 - 0 (0%)
50von 10 ▲ 4 (40%)
51April 10 ▲ new
52Googles 9 ▼ -1 (-11%)
53Cryptocurrency 9 ▲ 1 (11%)
54MFA 9 ▲ 4 (44%)
55Last 9 ▼ -8 (-89%)
56CISA 8 ▲ 6 (75%)
57GoogleCloudNEXT 8 ▲ 5 (63%)
58hijack 8 - 0 (0%)
59Artikel 7 ▲ new
60Gemini 7 - 0 (0%)
61Linux 7 ▲ 1 (14%)
62Apple 7 ▼ -8 (-114%)
63클라우드 7 ▲ 4 (57%)
64payment 7 - 0 (0%)
65GitHub 7 ▼ -1 (-14%)
66Vawtrak 7 ▲ 2 (29%)
67Ucraina 6 ▲ 2 (33%)
68RATel 6 ▼ -2 (-33%)
69Europe 6 ▲ 1 (17%)
70United Kingdom 6 ▲ 3 (50%)
71Backdoor 6 ▼ -3 (-50%)
72c&c 6 ▼ -5 (-83%)
73search 6 ▲ 4 (67%)
74KI 6 ▼ -1 (-17%)
75Shield 6 ▲ new
76Blue 6 ▲ new
77IoC 6 ▼ -8 (-133%)
78CrowdStrike 6 ▲ new
79MWNEWS 6 ▲ 1 (17%)
80amp 6 ▲ 3 (50%)
81Amazon 6 ▲ 1 (17%)
82Distribution 5 ▼ -5 (-100%)
83Patchday 5 ▲ 2 (40%)
84UNC5221 5 ▲ new
85model 5 ▲ 4 (80%)
86Facebook 5 ▼ -1 (-20%)
87LinkedIn 5 ▲ 1 (20%)
88code 5 ▲ 1 (20%)
89Takedown 5 ▼ -1 (-20%)
90Telegram 5 ▼ -7 (-140%)
91So 5 ▲ 3 (60%)
92WhatsApp 5 - 0 (0%)
93Japan 5 ▲ 3 (60%)
94Social Engineering 4 - 0 (0%)
95Canada 4 ▲ 2 (50%)
96big 4 - 0 (0%)
97South Korea 4 - 0 (0%)
98Iran 4 ▲ 1 (25%)
99DNS 4 ▲ 2 (50%)
100Java 4 - 0 (0%)
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
Ransomware
12 (30%)
Lobshot
12 (30%)
Vawtrak
7 (17.5%)
RATel
6 (15%)
GootLoader
3 (7.5%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

Keyword Average Label
UNC5221
5 (100%)
Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
Exploit
56 (29.6%)
Campaign
34 (18%)
Phishing
33 (17.5%)
Remote Code Execution
15 (7.9%)
RCE
13 (6.9%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
Google
289 (56.1%)
United States
38 (7.4%)
Microsoft
31 (6%)
Mandiant
17 (3.3%)
China
17 (3.3%)
Threat info
Last 5

SNS

(Total : 75)
  Total keyword

Google Exploit attack Update Chrome Android Advertising Criminal Email Malware Attacker Browser Phishing ZeroDay Report Vulnerability hijack Campaign Microsoft target Victim Mandiant Gmail Lobshot Hijacking Apple payment Windows GootLoader Vawtrak Intelligence Ucraina Takedown Government PayPal Stealer targeted Russia Kaspersky ...

No Title Date
1Kaspersky @kaspersky
Your browser is watching you ????‼️ #GoogleChrome. #MicrosoftEdge, & more. One by one, they’ve cracked down on ad blockers, embraced fingerprinting, and rewritten the rules, all while pocketing your data. So, who’s actually on your side? Swipe to uncover the best private https://t.co/JVYOiWJsM		2025.04.26
2Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer
????deGoogle Your Life https://t.co/TKfDkwFYYn		2025.04.26
3Kaspersky @kaspersky
???? Phishing attacks through SVG image files ???? Our experts have detected a sharp rise in attackers using #SVG (Scalable Vector Graphics) files to deliver phishing emails, both to individuals and businesses. Once opened, these files redirect users to fake #Google and #Microsoft https://t.co/hlF		2025.04.25
4Virus Bulletin @virusbtn
Google Mandiant has released the 16th edition of M-Trends, which looks into several trends, data & analysis from incident response engagements. Stolen credentials are now the second highest initial infection vector as the use of infostealers is on the rise https://t.co/33h9ZniSHs https://t.co/zk		2025.04.25
5MalwareHunterTeam @malwrhunterteam
"xai_bypasss_2025" ???? Downloads the "image_viewer.exe" sample from: https://storage.googleapis.com/msgsndr/8hGy0olDfKm2LBrxcCNj/media/680a977d9020da62bd808753.jpeg https://t.co/lQA8iiTqDy		2025.04.25

News

(Total : 214)
  Total keyword

Google Malware Update Software Report Exploit Vulnerability United States target attack intelligence Attacker Chrome Android Campaign Advertising Phishing Email Microsoft Browser Criminal China Operation Victim ZeroDay Windows Remote Code Execution Gmail RCE Mandiant Kaspersky Ransomware Government ChatGPT Education Russia VPN Password 구글 hacking Cryptocurrency North Korea MFA Lobshot CISA GitHub Linux United Kingdom RATel Amazon IoC c&c Backdoor Distribution Facebook Telegram Japan Vawtrak CrowdStrike UNC5221 Europe LinkedIn WhatsApp Apple DNS Banking payment Microsoft Edge Social Engineering Canada DDoS South Korea Ucraina Java Zero Trust ...

No Title Date
1Gmail für Android und iOS: Google sorgt für mehr Flexibilität und bringt neue Gemini-Funktionen - IT Sicherheitsnews2025.04.28
2뷰소닉, 구글TV 내장 스마트 포터블 빔프로젝터 ‘M1 Max’ 한국 시장 신출 - 데일리시큐2025.04.28
3Pete Hegseth’s Signal Scandal Spirals Out of Control - Security Latest- WIRED2025.04.26
4Is Detection Engineering just glorified googling? - Malware.News2025.04.26
5Threat Hunting: For what, when, and how? - Malware.News2025.04.26

Additional information

No Request Hash(md5) Report No Date
12025416-方案1-方案細節.pdf.lnk
Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader UPX ASPack Malicious Library Admin Tool (Sysinternals etc ...) Http API PWS Code injection Create Service Socket DGA ScreenShot Escalate priviledges Steal 		c77858bbcfb2ab87d9469d6376cbe223602572025.04.28
2 setup.exe
Client SW User Data Stealer browser info stealer Generic Malware Downloader Google Chrome User Data ASPack Malicious Library UPX Admin Tool (Sysinternals etc ...) ScreenShot Http API PWS Code injection Create Service Socket DGA Escalate priviledges Steal 		eb497402e6fcb1c7cfb3f129bcc4f3f0602582025.04.28
3Software-MSI.msi
Client SW User Data Stealer browser info stealer Generic Malware Downloader Google Chrome User Data Malicious Library Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS VNC Code injection Internet 		afc28d87bbf6cb0c9018a0fb1ee216c3598002025.04.21
4 cookies-alert-script.js.pobran...
Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection BitCoin Internet API persistenc 		223545c1ac7813572f8fd3792dd4f953595422025.04.20
5 anchor.html
Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection BitCoin Internet API persistenc 		d518b91a0e17a2e557ccf1270b99ca99595702025.04.20
View only the last 5
Level Description
warning File has been identified by 27 AntiVirus engines on VirusTotal as malicious
watch Drops a binary and executes it
watch Found URLs in memory pointing to an IP address rather than a domain (potentially indicative of Command & Control traffic)
watch One or more non-whitelisted processes were created
watch Requests access to read memory contents of lsass.exe potentially indicative of credential dumping
watch Resumed a suspended thread in a remote process potentially indicative of process injection
notice A process created a hidden window
notice Allocates read-write-execute memory (usually to unpack itself)
notice An application raised an exception which may be indicative of an exploit crash
notice Creates (office) documents on the filesystem
notice Creates a shortcut to an executable file
notice Creates a suspicious process
notice Creates executable files on the filesystem
notice Drops an executable to the user AppData folder
notice One or more potentially interesting buffers were extracted
notice Potentially malicious URLs were found in the process memory dump
notice Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation
notice Starts servers listening
notice Steals private information from local Internet browsers
notice Yara rule detected in process memory
info Checks amount of memory in system
info Checks if process is being debugged by a debugger
info One or more processes crashed
info Tries to locate where the browsers are installed
No data
No data
Beta Service, If you select keyword, you can check detailed information.