popup

Cyber Threat Trends

  1. Day Week

Gemelli flickerflypro flickerfly

Summary: 2025/05/03 19:13

First reported date: 2024/10/24
Inquiry period : 2025/04/03 19:13 ~ 2025/05/03 19:13 (1 months), 5 search results

전 기간대비 20% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 MintsLoader Malware 입니다.
악성코드 유형 Trojan RAT Stealc 도 새롭게 확인됩니다.
공격기술 Phishing ClearFake ClickFix Hijacking hijack 도 새롭게 확인됩니다.
기관 및 기업 Recorded Future 도 새롭게 확인됩니다.
기타 attack Future powershell GhostWeaver Unpacked 등 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/05/02 MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks
    ㆍ 2025/04/29 Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1MintsLoader 5 ▲ 1 (20%)
2Malware 3 ▲ 2 (67%)
3Recorded Future 3 ▲ new
4attack 3 ▲ new
5Future 2 ▲ new
6Phishing 2 ▲ new
7ClearFake 2 ▲ new
8ClickFix 2 ▲ new
9Trojan 2 ▲ new
10powershell 2 ▲ new
11GhostWeaver 2 ▲ new
12Hijacking 1 ▲ new
13Unpacked 1 ▲ new
14Threat 1 ▲ new
15Drops 1 ▲ new
16RAT 1 ▲ new
17Java 1 - 0 (0%)
18Browser 1 ▲ new
19NortonLifeLock 1 ▲ new
20Report 1 ▲ new
21c&c 1 ▲ new
22C2 1 ▲ new
23AntiVM 1 ▲ new
24stealthy 1 ▲ new
25ThreatProtection 1 ▲ new
26Stealc 1 ▲ new
27Advertising 1 ▲ new
28malicious 1 ▲ new
29Group 1 ▲ new
30Insikt 1 ▲ new
31Recorded 1 ▲ new
32intelligence 1 ▲ new
33hijack 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
Trojan
2 (50%)
RAT
1 (25%)
Stealc
1 (25%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

No data.

Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
Phishing
2 (25%)
ClearFake
2 (25%)
ClickFix
2 (25%)
Hijacking
1 (12.5%)
hijack
1 (12.5%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
Recorded Future
3 (100%)
Threat info
Last 5

SNS

(Total : 3)
  Total keyword

attack Trojan hijack ClickFix Browser ClearFake Hijacking powershell c&c C2 Malware Stealc Advertising Recorded Future Phishing

No Title Date
1The Hacker News @TheHackersNews
???? New Threat Unpacked: MintsLoader + GhostWeaver! A stealthy loader (MintsLoader) is being used in real-world phishing attacks to silently drop GhostWeaver—a persistent PowerShell-based trojan stealing browser data & hijacking systems. ⚠️ Tactics include: — ClickFix social https://t.co/qB5O		2025.05.02
2Threat Intelligence @threatintel
#ThreatProtection #MintsLoader fuels stealthy attacks with AntiVM tactics, obfuscated scripts and rotating C2 domains. Read more about Symantec's protection: https://t.co/kTnwE6LTjt #Malware		2025.05.02
3Virus Bulletin @virusbtn
Recorded Future Insikt Group researchers analyse MintsLoader, a malicious loader deployed through multiple infection vectors that commonly deploys second-stage payloads such as GhostWeaver, StealC, and a modified BOINC client. https://t.co/mZx0kJt57X https://t.co/Yj94S92Xni		2025.05.01

News

(Total : 2)
  Total keyword

Malware Recorded Future RAT ClearFake ClickFix attack Trojan powershell Java Report Phishing intelligence

No Title Date
1MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks - The Hacker News2025.05.02
2Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting - Recorded Future / Insikt Group / malpedia2025.04.29

Additional information

No data
No data
No data
No URL CC ASN Co Reporter Date
1http://45.11.180.77/js/rqshzg.txt
js MintsLoader opendir 		GB GBM247 LtdNDA0E2024.12.18
2https://45.11.180.77/js/pbjhce.txt
js MintsLoader opendir 		GB GBM247 LtdNDA0E2024.12.18
3http://45.11.180.77/js/zsnceq.txt
js MintsLoader opendir 		GB GBM247 LtdNDA0E2024.12.18
4https://45.11.180.77/js/acvixr.txt
js MintsLoader opendir 		GB GBM247 LtdNDA0E2024.12.18
5https://45.11.180.77/js/gursxj.txt
js MintsLoader opendir 		GB GBM247 LtdNDA0E2024.12.18
View only the last 5
Beta Service, If you select keyword, you can check detailed information.