Cyber Threat Trends

Summary: 2025/04/29 04:45

First reported date: 2024/01/14
Inquiry period : 2025/03/30 04:45 ~ 2025/04/29 04:45 (1 months), 13 search results

전 기간대비 신규 트렌드를 보이고 있습니다.
악성코드 유형 Ransomware NetWireRC Clipbanker XMRig DslogdRAT Trojan Rhysida BlackSuit SectopRAT RATel 도 새롭게 확인됩니다.
공격자 UNC5221 도 새롭게 확인됩니다.
공격기술 Exploit Campaign hacking Backdoor Dropper Webshell RCE Remote Code Execution DDoS 도 새롭게 확인됩니다.
기관 및 기업 China Mandiant Google United States CISA Europe Government Japan Apple Check Point Germany India Cisco 도 새롭게 확인됩니다.
기타 ZeroDay Vulnerability Malware Update Ivanti 등 신규 키워드도 확인됩니다.

* 최근 뉴스기사 Top3:
    ㆍ 2025/04/24 DslogdRAT Malware Installed in Ivanti Connect Secure
    ㆍ 2025/04/17 China-linked BRICKSTORM backdoor involved in Europe-targeted cyberespionage
    ㆍ 2025/04/16 Threat Intelligence Snapshot: Week 15, 2025

Date range button:

First seen:

Last seen:

Keyword

Trend graph by period

Related keyword cloud

Top 100

#	Trend	Count	Comparison
1	UNC5221	15	▲ new
2	China	13	▲ new
3	Exploit	9	▲ new
4	ZeroDay	9	▲ new
5	Vulnerability	8	▲ new
6	Malware	7	▲ new
7	Update	6	▲ new
8	Ivanti	6	▲ new
9	Mandiant	6	▲ new
10	Campaign	6	▲ new
11	Google	5	▲ new
12	Report	5	▲ new
13	VPN	5	▲ new
14	target	4	▲ new
15	hacking	4	▲ new
16	group	4	▲ new
17	UNC	3	▲ new
18	악용	3	▲ new
19	CVSS	3	▲ new
20	United States	3	▲ new
21	Ransomware	3	▲ new
22	공격	3	▲ new
23	CISA	3	▲ new
24	취약점	3	▲ new
25	intelligence	3	▲ new
26	Operation	3	▲ new
27	Backdoor	3	▲ new
28	cyberespionage	2	▲ new
29	Android	2	▲ new
30	Windows	2	▲ new
31	Dropper	2	▲ new
32	Connect	2	▲ new
33	Secure	2	▲ new
34	securityaffairs	2	▲ new
35	Webshell	2	▲ new
36	Europe	2	▲ new
37	NetWireRC	2	▲ new
38	Password	2	▲ new
39	Consumer	1	▲ new
40	Snapshot	1	▲ new
41	exploitation	1	▲ new
42	WinRAR	1	▲ new
43	Threat	1	▲ new
44	Clipbanker	1	▲ new
45	Government	1	▲ new
46	c&c	1	▲ new
47	BRICKSTORM	1	▲ new
48	MWNEWS	1	▲ new
49	Europetargeted	1	▲ new
50	XMRig	1	▲ new
51	Japan	1	▲ new
52	Advertising	1	▲ new
53	RCE	1	▲ new
54	attack	1	▲ new
55	DslogdRAT	1	▲ new
56	shell	1	▲ new
57	C2	1	▲ new
58	time	1	▲ new
59	Apple	1	▲ new
60	DarkWeb	1	▲ new
61	Check Point	1	▲ new
62	Linux	1	▲ new
63	CVE	1	▲ new
64	wild	1	▲ new
65	Chinalinked	1	▲ new
66	Chinabacked	1	▲ new
67	espionage	1	▲ new
68	Trojan	1	▲ new
69	Remote Code Execution	1	▲ new
70	Software	1	▲ new
71	Router	1	▲ new
72	DDoS	1	▲ new
73	버전	1	▲ new
74	Rhysida	1	▲ new
75	IoC	1	▲ new
76	ICS	1	▲ new
77	조직	1	▲ new
78	Cobalt Strike	1	▲ new
79	Victim	1	▲ new
80	Germany	1	▲ new
81	India	1	▲ new
82	BlackSuit	1	▲ new
83	SectopRAT	1	▲ new
84	Cisco	1	▲ new
85	RATel	1	▲ new
86	Proxy	1	▲ new

Special keyword group

Top 5

Malware Type

This is the type of malware that is becoming an issue.

Keyword	Average	Label
Ransomware		3 (23.1%)
NetWireRC		2 (15.4%)
Clipbanker		1 (7.7%)
XMRig		1 (7.7%)
DslogdRAT		1 (7.7%)

Attacker & Actors

The status of the attacker or attack group being issued.

Keyword	Average	Label
UNC5221		15 (100%)

Technique

This is an attack technique that is becoming an issue.

Keyword	Average	Label
Exploit		9 (31%)
Campaign		6 (20.7%)
hacking		4 (13.8%)
Backdoor		3 (10.3%)
Dropper		2 (6.9%)

Country & Company

This is a country or company that is an issue.

Keyword	Average	Label
China		13 (33.3%)
Mandiant		6 (15.4%)
Google		5 (12.8%)
United States		3 (7.7%)
CISA		3 (7.7%)

Threat info

Last 5

SNS

(Total : 4)

Total keyword

unc5221 China ZeroDay Exploit hacking Mandiant CVSS Vulnerability Update Malware VPN

No	Title	Date
1	Cyber_OSINT @Cyber_O51NT Cyber-espionage group UNC5221, linked to China, has been exploiting vulnerabilities in Ivanti Connect Secure VPN appliances since 2023, showcasing their ability to weaponize zero-day exploits effectively. #CyberSecurity #UNC5221 https://t.co/wbslKlCshk	2025.04.18
2	The Hacker News @TheHackersNews ???? New Ivanti ZERO-DAY exploited in the wild — China-linked UNC5221 hits Connect Secure (CVE-2025-22457, CVSS 9.0). ???? Exploits spotted mid-March by Mandiant. ????️‍♂️Malware: TRAILBLAZE, BRUSHFIRE, SPAWN. ???? Persistence. Credential theft. Data exfiltration. ⚡ Patch now \| See full https://t.	2025.04.04
3	Pierluigi Paganini - Security Affairs @securityaffairs #China-linked group #UNC5221 exploited #Ivanti Connect Secure zero-day since mid-March https://t.co/J9u8W4FYPc #securityaffairs #hacking -	2025.04.04
4	Pierluigi Paganini - Security Affairs @securityaffairs #China-linked group #UNC5221 exploited #Ivanti Connect Secure zero-day since mid-March https://t.co/J9u8W4FYPc #securityaffairs #hacking	2025.04.03

News

(Total : 9)

Total keyword

China UNC5221 Vulnerability Malware Campaign Google Report Mandiant Update ZeroDay Exploit target VPN Backdoor intelligence 취약점 CISA Operation Ransomware Attacker United States Android CVSS NetWireRC Windows Password Dropper Webshell Europe hacking Clipbanker WinRAR Government Japan c&c XMRig Advertising RCE attack DslogdRAT C2 Apple Check Point Router IoC Linux Remote Code Execution Trojan CVE Software Rhysida DDoS Cobalt Strike Victim Germany India BlackSuit DarkWeb SectopRAT Cisco RATel

No	Title	Date
1	DslogdRAT Malware Installed in Ivanti Connect Secure - Malware.News	2025.04.24
2	China-linked BRICKSTORM backdoor involved in Europe-targeted cyberespionage - Malware.News	2025.04.17
3	Threat Intelligence Snapshot: Week 15, 2025 - Malware.News	2025.04.16
4	7th April – Threat Intelligence Report - Malware.News	2025.04.07
5	이반티 방화벽 취약점 악용…중국 연계 해커 조직 ‘UNC5221’ 정교한 공격 감행 - 데일리시큐	2025.04.06

Additional information

No	Title	Date
1	FBI Reports ₹1.38 Lakh Crore Loss in 2024, a 33% Surge from 2023 - Malware.News	2025.04.29
2	US intensifies Salt Typhoon crackdown with public info request - Malware.News	2025.04.29
3	Trump moves threaten US cyber defenses, says former CISA director Easterly - Malware.News	2025.04.29
4	Escalating attacks against Ivanti VPN appliances expected - Malware.News	2025.04.29
5	Critical Planet Technology switch vulnerabilities pose total takeover risk - Malware.News	2025.04.29
View only the last 5

No	Title	Date
1	DslogdRAT Malware Installed in Ivanti Connect Secure - Malware.News	2025.04.24
2	DslogdRAT Malware Installed in Ivanti Connect Secure - Malware.News	2025.04.24
3	Threat Intelligence Snapshot: Week 15, 2025 - Malware.News	2025.04.16
4	7th April – Threat Intelligence Report - Malware.News	2025.04.07
5	7th April – Threat Intelligence Report - Malware.News	2025.04.07
View only the last 5

No data

Beta Service, If you select keyword, you can check detailed information.