Summary: 2025/04/29 00:20
First reported date: 2021/03/01
Inquiry period : 2025/03/30 00:20 ~ 2025/04/29 00:20 (1 months), 7 search results
전 기간대비 71% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 GootLoader Malware Phishing 입니다.
악성코드 유형 Lobshot SmokeLoader Dbatloader XWorm 도 새롭게 확인됩니다.
공격기술 FakeUpdates Campaign 도 새롭게 확인됩니다.
기관 및 기업 Google Proofpoint 도 새롭게 확인됩니다.
기타 Advertising ThreatProtection Email NortonLifeLock Endgame 등 신규 키워드도 확인됩니다.
According to PCrisk, they discovered GootLoader malware while examining legitimate but compromised websites (mainly websites managed using WordPress). It was found that GootLoader is used to infect computers with additional malware. Cybercriminals using GootLoader seek to trick users into unknowingly downloading and executing the malware by disguising it as a document or other file. Ref.
* 최근 뉴스기사 Top3:
ㆍ 2025/03/31 Gootloader Returns: Malware Hidden in Google Ads for Legal Documents
참고로 동일한 그룹의 악성코드 타입은 SmokeLoader GuLoader Zloader 등 47개 종이 확인됩니다.
Trend graph by period
Related keyword cloud
Top 100# | Trend | Count | Comparison |
---|---|---|---|
1 | GootLoader | 7 | ▲ 5 (71%) |
2 | Malware | 4 | ▲ 2 (50%) |
3 | Advertising | 3 | ▲ new |
4 | 3 | ▲ new | |
5 | Lobshot | 3 | ▲ new |
6 | ThreatProtection | 2 | ▲ new |
7 | 2 | ▲ new | |
8 | NortonLifeLock | 2 | ▲ new |
9 | Phishing | 2 | ▲ 1 (50%) |
10 | Update | 1 | ▼ -1 (-100%) |
11 | Endgame | 1 | ▲ new |
12 | SmokeLoader | 1 | ▲ new |
13 | spyware | 1 | ▲ new |
14 | FakeUpdates | 1 | ▲ new |
15 | Ransomware | 1 | ▼ -1 (-100%) |
16 | proton66 | 1 | ▲ new |
17 | attack | 1 | - 0 (0%) |
18 | Dbatloader | 1 | ▲ new |
19 | cyberthreat | 1 | ▲ new |
20 | Proton | 1 | ▲ new |
21 | infrastructure | 1 | ▲ new |
22 | hub | 1 | ▲ new |
23 | C2 | 1 | ▲ new |
24 | XWorm | 1 | ▲ new |
25 | c&c | 1 | ▲ new |
26 | Operation | 1 | - 0 (0%) |
27 | Latest | 1 | ▲ new |
28 | Europols | 1 | ▲ new |
29 | certain | 1 | ▲ new |
30 | Returns | 1 | ▲ new |
31 | Hidden | 1 | ▲ new |
32 | document | 1 | ▲ new |
33 | creation | 1 | ▲ new |
34 | Proofpoint | 1 | ▲ new |
35 | activity | 1 | ▲ new |
36 | file | 1 | ▲ new |
37 | URL | 1 | ▲ new |
38 | spread | 1 | ▲ new |
39 | zip | 1 | ▲ new |
40 | JavaScript | 1 | ▲ new |
41 | Java | 1 | - 0 (0%) |
42 | Dark | 1 | ▲ new |
43 | Reading | 1 | ▲ new |
44 | Resurfaces | 1 | ▲ new |
45 | malvertisements | 1 | ▲ new |
46 | variant | 1 | ▲ new |
47 | Campaign | 1 | ▲ new |
Special keyword group
Top 5
Malware Type
This is the type of malware that is becoming an issue.
Keyword | Average | Label |
---|---|---|
GootLoader |
|
7 (50%) |
Lobshot |
|
3 (21.4%) |
SmokeLoader |
|
1 (7.1%) |
Ransomware |
|
1 (7.1%) |
Dbatloader |
|
1 (7.1%) |

Attacker & Actors
The status of the attacker or attack group being issued.
No data.

Technique
This is an attack technique that is becoming an issue.
Keyword | Average | Label |
---|---|---|
Phishing |
|
2 (50%) |
FakeUpdates |
|
1 (25%) |
Campaign |
|
1 (25%) |

Country & Company
This is a country or company that is an issue.
Keyword | Average | Label |
---|---|---|
|
3 (75%) | |
Proofpoint |
|
1 (25%) |
Malware Family
Top 5
A malware family is a group of applications with similar attack techniques.
In this trend, it is classified into Ransomware, Stealer, RAT or Backdoor, Loader, Botnet, Cryptocurrency Miner.
Threat info
Last 5SNS
(Total : 6)GootLoader Malware Email Phishing Advertising Lobshot Google SmokeLoader spyware FakeUpdates Ransomware c&c XWorm C2 Update attack Dbatloader Operation Proofpoint Java Campaign
News
(Total : 1)Malware Lobshot GootLoader Advertising Google
No | Title | Date |
---|---|---|
1 | Gootloader Returns: Malware Hidden in Google Ads for Legal Documents - GootLoader Wordpress / gootloadersites / malpedia | 2025.03.31 |
Additional information
No | Title | Date |
---|---|---|
1 | Employee monitoring app exposes users, leaks 21+ million screenshots - Malware.News | 2025.04.28 |
2 | Introducing XSIAM 3.0 - Malware.News | 2025.04.28 |
3 | Deploy Bravely with Prisma AIRS - Malware.News | 2025.04.28 |
4 | 2025 Cyber Resilience Research Discovers Speed of AI Advancing Emerging Attack Types - Malware.News | 2025.04.28 |
5 | Intel CEO Targets Change in Corporate Culture to Shape Up - Bloomberg Technology | 2025.04.28 |
View only the last 5 |
No | Title | Date |
---|---|---|
1 | Gootloader Returns: Malware Hidden in Google Ads for Legal Documents - GootLoader Wordpre... / gootloadersites / malpedia | 2025.03.31 |
2 | One in Four Cyberattacks in 2024 Traced to Infostealers, Huntress Reports - Malware.News | 2025.03.03 |
3 | Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab - Malware.News | 2025.03.01 |
4 | Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab - Malware.News | 2025.03.01 |
5 | Threat Intelligence Snapshot: Week 4, 2025 - Malware.News | 2025.01.24 |
View only the last 5 |
No | URL | CC | ASN Co | Reporter | Date |
---|---|---|---|---|---|
1 | https://dugmv.si/xmlrpc.php GootLoader | SI ![]() | Telemach d.o.o. | lontze7 | 2024.11.25 |
2 | https://www.janecourtney.ca/get.php GootLoader | US ![]() | IS-AS-1 | zp4_sec | 2024.01.23 |
3 | https://www.joinmycourse.com/get.php GootLoader | DE ![]() | PlusServer GmbH | zp4_sec | 2024.01.23 |
4 | https://uumu.fi/blog.php gating GootLoader | FI ![]() | DNA Oyj | Gootloader2 | 2023.12.13 |
5 | https://vente-outillages.com/blog.php gating GootLoader | FR ![]() | Xefi Lyon SAS | Gootloader2 | 2023.12.13 |
View only the last 5 |