Summary: 2025/05/02 19:40
First reported date: 2022/08/11
Inquiry period : 2025/04/02 19:40 ~ 2025/05/02 19:40 (1 months), 6 search results
전 기간대비 신규 트렌드를 보이고 있습니다.
악성코드 유형 ROMCOMRAT RomCom NetWireRC RAT ROMCOM RAT Trojan 도 새롭게 확인됩니다.
공격기술 Campaign APT 도 새롭게 확인됩니다.
기관 및 기업 Kaspersky Russia Government NATO ESET 도 새롭게 확인됩니다.
기타 target Malware attack Nebulous Russianspeaking 등 신규 키워드도 확인됩니다.
Unit 42 observed threat actor Tropical Scorpius using this RAT in operations where also Cuba ransomware was deployed. Ref.
* 최근 뉴스기사 Top3:
ㆍ 2025/05/02 Multi-stage malware attacks launched by Nebulous Mantis APT
ㆍ 2025/04/30 Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks
참고로 동일한 그룹의 악성코드 타입은 Remcos njRAT QuasarRAT 등 112개 종이 확인됩니다.
Trend graph by period
Related keyword cloud
Top 100| # | Trend | Count | Comparison |
|---|---|---|---|
| 1 | ROMCOMRAT | 6 | ▲ new |
| 2 | Kaspersky | 5 | ▲ new |
| 3 | Russia | 5 | ▲ new |
| 4 | Campaign | 4 | ▲ new |
| 5 | target | 3 | ▲ new |
| 6 | RomCom | 3 | ▲ new |
| 7 | Malware | 3 | ▲ new |
| 8 | attack | 3 | ▲ new |
| 9 | Nebulous | 3 | ▲ new |
| 10 | APT | 3 | ▲ new |
| 11 | Russianspeaking | 2 | ▲ new |
| 12 | Espionage | 2 | ▲ new |
| 13 | NetWireRC | 2 | ▲ new |
| 14 | RAT | 2 | ▲ new |
| 15 | ROMCOM RAT | 2 | ▲ new |
| 16 | Mantis | 2 | ▲ new |
| 17 | Government | 1 | ▲ new |
| 18 | Report | 1 | ▲ new |
| 19 | httpstcoj | 1 | ▲ new |
| 20 | group | 1 | ▲ new |
| 21 | NATO | 1 | ▲ new |
| 22 | something | 1 | ▲ new |
| 23 | Operation | 1 | ▲ new |
| 24 | Sample | 1 | ▲ new |
| 25 | ESET | 1 | ▲ new |
| 26 | detection | 1 | ▲ new |
| 27 | Alert | 1 | ▲ new |
| 28 | httpstcoqiL | 1 | ▲ new |
| 29 | NATOLinked | 1 | ▲ new |
| 30 | Targets | 1 | ▲ new |
| 31 | Trojan | 1 | ▲ new |
| 32 | c&c | 1 | ▲ new |
| 33 | Multistage | 1 | ▲ new |
Special keyword group
Top 5
Malware Type
This is the type of malware that is becoming an issue.
| Keyword | Average | Label |
|---|---|---|
| ROMCOMRAT |
|
6 (37.5%) |
| RomCom |
|
3 (18.8%) |
| NetWireRC |
|
2 (12.5%) |
| RAT |
|
2 (12.5%) |
| ROMCOM RAT |
|
2 (12.5%) |
Attacker & Actors
The status of the attacker or attack group being issued.
No data.
Country & Company
This is a country or company that is an issue.
| Keyword | Average | Label |
|---|---|---|
| Kaspersky |
|
5 (38.5%) |
| Russia |
|
5 (38.5%) |
| Government |
|
1 (7.7%) |
| NATO |
|
1 (7.7%) |
| ESET |
|
1 (7.7%) |
Malware Family
Top 5
A malware family is a group of applications with similar attack techniques.
In this trend, it is classified into Ransomware, Stealer, RAT or Backdoor, Loader, Botnet, Cryptocurrency Miner.
Threat info
Last 5SNS
(Total : 4)ROMCOMRAT Campaign Russia Kaspersky APT target RomCom ESET Malware RAT ROMCOM RAT NetWireRC attack
News
(Total : 2)Malware Kaspersky Russia attack ROMCOMRAT Report Operation NATO target Government Campaign NetWireRC RomCom ROMCOM RAT Trojan RAT c&c APT
| No | Title | Date |
|---|---|---|
| 1 | Multi-stage malware attacks launched by Nebulous Mantis APT - Malware.News | 2025.05.02 |
| 2 | Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks - The Hacker News | 2025.04.30 |
Additional information
| No | Title | Date |
|---|---|---|
| 1 | MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks - The Hacker News | 2025.05.02 |
| 2 | xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs - Malware.News | 2025.05.02 |
| 3 | Top NSC official wants to normalize offensive hacking as tool of US might - Malware.News | 2025.05.02 |
| 4 | Widespread Fortune 500 firm infiltration conducted by North Koreans - Malware.News | 2025.05.02 |
| 5 | Third-party breach compromises Ascension Health patient data - Malware.News | 2025.05.02 |
| View only the last 5 | ||
| No | Title | Date |
|---|---|---|
| 1 | Multi-stage malware attacks launched by Nebulous Mantis APT - Malware.News | 2025.05.02 |
| 2 | Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks - The Hacker News | 2025.04.30 |
| 3 | Monthly Threat Actor Group Intelligence Report, December 2024 (JPN) - Malware.News | 2025.02.26 |
| 4 | Monthly Threat Actor Group Intelligence Report, December 2024 (JPN) - Malware.News | 2025.02.26 |
| 5 | Monthly Threat Actor Group Intelligence Report, December 2024 (JPN) - Malware.News | 2025.02.26 |
| View only the last 5 | ||