popup

Cyber Threat Trends

  1. Day Week

Gemelli flickerflypro flickerfly

Summary: 2025/04/28 18:39

First reported date: 2021/03/04
Inquiry period : 2025/03/29 18:39 ~ 2025/04/28 18:39 (1 months), 29 search results

전 기간대비 62% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Open Directory WsgiDAV Opendir Cloudflare Malware 입니다.
악성코드 유형 NetWireRC Ransomware VenomRAT LockBit RAT KrakenKeylogger RATel SparkRAT NirCmd 도 새롭게 확인됩니다.
공격자 SideCopy 도 새롭게 확인됩니다.
공격기술 Campaign Phishing RCE Social Engineering 도 새롭게 확인됩니다.
기관 및 기업 Microsoft United States VirusTotal Accenture UAE China India North Korea Okta Akamai 도 새롭게 확인됩니다.
기타 same c&c content Victim stage 등 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/08 Goodbye HTA, Hello MSI: New TTPs and Clusters of an APT driven by Multi-Platform Attacks
    ㆍ 2025/04/08 Scattered Spider: Still Hunting for Victims in 2025

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1Open Directory 29 ▲ 18 (62%)
2WsgiDAV 15 ▲ 10 (67%)
3Opendir 14 ▲ 9 (64%)
4Cloudflare 12 ▲ 8 (67%)
5same 4 ▲ new
6c&c 4 ▲ new
7Malware 4 ▲ 2 (50%)
8NetWireRC 3 ▲ new
9content 3 ▲ new
10Ransomware 2 ▲ new
11Microsoft 2 ▲ new
12United States 2 ▲ new
13Campaign 2 ▲ new
14Phishing 2 ▲ new
15Victim 2 ▲ new
16stage 2 ▲ new
17Next 2 ▲ new
18SquiblydooBlog 1 ▲ new
19httpstcok 1 ▲ new
20httpsfygolffractionbathtrycloudflarecom 1 ▲ new
21Maybe 1 ▲ new
22httpsearnmnetapi 1 ▲ new
23C2 1 ▲ new
24Related 1 - 0 (0%)
25httpstcoGxmRuZEbPa 1 ▲ new
26IP 1 ▲ new
27different 1 ▲ new
28httpstcoqNHemv 1 ▲ new
29httpstco 1 ▲ new
30httpscoldneonspringfieldassettrycloudflarecom 1 ▲ new
31httpsnationaldefencebackupxyzdocAdjustablelpk 1 ▲ new
32httpstcopL 1 ▲ new
33ENERGETIC BEAR 1 ▲ new
34Ma 1 ▲ new
35httpspendantaskchicomparabletrycloudflarecom 1 ▲ new
36hvnc 1 ▲ new
37VenomRAT 1 ▲ new
38af 1 ▲ new
39MimiKatz 1 ▲ new
40Thought 1 ▲ new
41RCE 1 ▲ new
42LockBit 1 ▲ new
43old 1 ▲ new
44possibility 1 ▲ new
45RAT 1 ▲ new
46ShanHolo 1 ▼ -1 (-100%)
47course 1 ▲ new
48Red Team 1 ▲ new
49boring 1 ▲ new
50httpstconQHfuueO 1 ▲ new
51sample 1 ▲ new
52gt 1 ▲ new
53httpscarltonsfilecommor 1 ▲ new
54Email 1 ▲ new
55Linux 1 ▲ new
56Advertising 1 ▲ new
57Cobalt Strike 1 ▲ new
58KrakenKeylogger 1 ▲ new
59Cryptocurrency 1 ▲ new
60YouTube 1 ▲ new
61Report 1 ▲ new
62RSA Conference 1 ▲ new
63Social Engineering 1 ▲ new
64VirusTotal 1 ▲ new
65httpstcoZOUNJmYwkc 1 ▲ new
66RATel 1 ▲ new
67http 1 ▲ new
68httpstcoxipsReonmS 1 ▲ new
69cc 1 ▲ new
70lame 1 ▲ new
71Yea 1 ▲ new
72cAPTure 1 ▲ new
73httpstcoaSb 1 ▲ new
74MFA 1 ▲ new
75Accenture 1 ▲ new
76UAE 1 ▲ new
77China 1 ▲ new
78Education 1 ▲ new
79Chrome 1 ▲ new
80Update 1 ▲ new
81GitHub 1 ▲ new
82Windows 1 ▲ new
83arrest 1 ▲ new
84India 1 ▲ new
85North Korea 1 ▲ new
86Okta 1 ▲ new
87SparkRAT 1 ▲ new
88powershell 1 ▲ new
89IoC 1 ▲ new
90The Shadow Brokers 1 ▲ new
91SideCopy 1 ▲ new
92A 1 ▲ new
93NirCmd 1 ▲ new
94Akamai 1 ▲ new
95httpstcodj 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

Keyword Average Label
NetWireRC
3 (25%)
Ransomware
2 (16.7%)
VenomRAT
1 (8.3%)
LockBit
1 (8.3%)
RAT
1 (8.3%)
Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

Keyword Average Label
SideCopy
1 (100%)
Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
Campaign
2 (33.3%)
Phishing
2 (33.3%)
RCE
1 (16.7%)
Social Engineering
1 (16.7%)
Country & Company
Country & Company

This is a country or company that is an issue.

Keyword Average Label
Cloudflare
12 (50%)
Microsoft
2 (8.3%)
United States
2 (8.3%)
VirusTotal
1 (4.2%)
Accenture
1 (4.2%)
Threat info
Last 5

SNS

(Total : 27)
  Total keyword

Open Directory Opendir Cloudflare Malware c&c RCE NetWireRC LockBit Ransomware MimiKatz Red Team ENERGETIC BEAR VenomRAT C2

No Title Date
1MalwareHunterTeam @malwrhunterteam
Opendir: https://fetuchini.store/ https://t.co/dj7KTE9Ly7		2025.04.28
2MalwareHunterTeam @malwrhunterteam
Opendir: http://66.63.187.9/documents/ https://t.co/4yCOULimRG		2025.04.26
3MalwareHunterTeam @malwrhunterteam
Next stage (opendir): https://nationaldefencebackup.xyz/doc/Adjustable.lpk https://t.co/pL2SmuLVeO		2025.04.26
4MalwareHunterTeam @malwrhunterteam
WsgiDAV opendir: http://23.27.143.73:4646/ https://t.co/nQHfuueO75		2025.04.22
5MalwareHunterTeam @malwrhunterteam
@SquiblydooBlog @ShanHolo Thought about that possibility of course, but as the opendir is inside the AS 401116, which is some bulletproof hosting thing related to nothing good, it would be very unlikely and also surprising if this is an official redteam, especially of some such company like that. ??		2025.04.22

News

(Total : 2)
  Total keyword

Microsoft United States Attacker Open Directory Malware Victim Phishing NetWireRC c&c Campaign Linux Cobalt Strike arrest Windows China North Korea India Chrome GitHub Update powershell Education UAE Advertising RAT Email SparkRAT Akamai IoC KrakenKeylogger VirusTotal Social Engineering RSA Conference Report YouTube Cryptocurrency Ransomware The Shadow Brokers MFA RATel Accenture Okta NirCmd SideCopy

No Title Date
1Goodbye HTA, Hello MSI: New TTPs and Clusters of an APT driven by Multi-Platform Attacks - Malware.News2025.04.08
2Scattered Spider: Still Hunting for Victims in 2025 - Malware.News2025.04.08

Additional information

No Title Date
128th April – Threat Intelligence Report - Malware.News2025.04.28
2Navigating Through The Fog - Malware.News2025.04.28
3Huawei Set to Test Powerful AI Chip to Rival Nvidia’s, WSJ Says - Bloomberg Technology2025.04.28
4Gamers Beware! New Attack Targets Gamers to Deploy AgeoStealer Malware - Malware.News2025.04.26
5Threat Hunting: For what, when, and how? - Malware.News2025.04.26
View only the last 5
No data
No data
No data
No data
Beta Service, If you select keyword, you can check detailed information.