Cyber Threat Trends

Summary: 2025/04/28 20:11

First reported date: 2009/11/11
Inquiry period : 2025/04/21 20:11 ~ 2025/04/28 20:11 (7 days), 79 search results

전 기간대비 22% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Google Malware Report attack Exploit 입니다.
악성코드 유형 NetWireRC 도 새롭게 확인됩니다.
공격기술 hacking Backdoor 도 새롭게 확인됩니다.
기관 및 기업 North Korea Splunk 북한 도 새롭게 확인됩니다.
기타 Blue Shield California thirdparty image 등 신규 키워드도 확인됩니다.

* 최근 뉴스기사 Top3:
    ㆍ 2025/04/26 Is Detection Engineering just glorified googling?
    ㆍ 2025/04/26 Threat Hunting: For what, when, and how?
    ㆍ 2025/04/26 구글 안드로이드 기기 보안 강화 위해 자동 재시작 기능 도입

Date range button:

First seen:

Last seen:

Keyword

Trend graph by period

Related keyword cloud

Top 100

#	Trend	Count	Comparison
1	Google	79	▲ 17 (22%)
2	Malware	24	▲ 9 (38%)
3	Report	19	▲ 13 (68%)
4	attack	19	▲ 13 (68%)
5	Exploit	14	▲ 9 (64%)
6	Campaign	14	▲ 9 (64%)
7	Phishing	13	▲ 8 (62%)
8	Chrome	13	▲ 5 (38%)
9	Vulnerability	12	▲ 7 (58%)
10	Advertising	12	▲ 6 (50%)
11	target	12	▲ 5 (42%)
12	Update	12	▼ -1 (-8%)
13	Email	12	▲ 6 (50%)
14	Browser	11	▲ 4 (36%)
15	Software	9	▼ -4 (-44%)
16	Microsoft	9	▲ 7 (78%)
17	Mandiant	9	▲ 8 (89%)
18	Victim	8	▲ 5 (63%)
19	Criminal	7	▲ 1 (14%)
20	AI	7	▼ -4 (-57%)
21	intelligence	7	▲ 1 (14%)
22	United States	7	▼ -4 (-57%)
23	Blue	6	▲ new
24	Operation	6	▲ 4 (67%)
25	Cryptocurrency	6	▲ 5 (83%)
26	Shield	6	▲ new
27	Gmail	6	▲ 5 (83%)
28	RCE	5	- 0 (0%)
29	China	5	▲ 1 (20%)
30	ZeroDay	5	▲ 3 (60%)
31	threat	4	▲ 1 (25%)
32	California	4	▲ new
33	Windows	4	▲ 1 (25%)
34	MFA	4	▲ 2 (50%)
35	Cloud	4	▲ 1 (25%)
36	Government	4	▲ 2 (50%)
37	ChatGPT	4	▼ -4 (-100%)
38	GitHub	4	▲ 3 (75%)
39	hacking	4	▲ new
40	Ransomware	3	- 0 (0%)
41	hijack	3	- 0 (0%)
42	Education	3	▼ -3 (-100%)
43	Linux	3	▲ 2 (67%)
44	Android	3	▼ -7 (-233%)
45	payment	3	- 0 (0%)
46	thirdparty	3	▲ new
47	CISA	3	▲ 2 (67%)
48	구글	3	▼ -1 (-33%)
49	Russia	3	- 0 (0%)
50	Password	3	▲ 1 (33%)
51	Lobshot	3	▲ 2 (67%)
52	Israel	3	▲ 2 (67%)
53	Search	3	▲ 2 (67%)
54	North Korea	3	▲ new
55	image	2	▲ new
56	sharp	2	▲ new
57	für	2	▲ 1 (50%)
58	Recorded Future	2	▲ 1 (50%)
59	SVG	2	▲ new
60	activity	2	▲ new
61	rise	2	▲ 1 (50%)
62	c&c	2	▲ 1 (50%)
63	IoC	2	▲ 1 (50%)
64	SOC	2	▲ new
65	MicrosoftEdge	2	▲ new
66	GoogleChrome	2	▲ new
67	Zero Trust	2	▲ new
68	Inc	2	▲ new
69	Scalable	2	▲ new
70	Splunk	2	▲ new
71	공격	2	▲ new
72	북한	2	▲ new
73	LinkedIn	2	▲ new
74	Amazon	2	- 0 (0%)
75	DBIR	2	▲ new
76	MTrends	2	▲ new
77	time	2	▲ new
78	Stealer	2	▲ 1 (50%)
79	Perplexity	2	▲ 1 (50%)
80	Verizon	2	▲ new
81	Iran	2	▲ 1 (50%)
82	court	2	▲ new
83	detection	2	▲ new
84	Googles	2	▼ -2 (-100%)
85	OpenAI	2	▲ 1 (50%)
86	NetWireRC	2	▲ new
87	Vawtrak	2	▲ 1 (50%)
88	query	2	▲ new
89	South Korea	2	- 0 (0%)
90	MURKYTOUR	2	▲ new
91	Backdoor	2	▲ new
92	health	2	▲ new
93	Motorola	2	▲ new
94	Kaspersky	2	▼ -3 (-150%)
95	RSAC	2	▲ 1 (50%)
96	Twitter	2	▲ new
97	Escalation	2	▲ new
98	Privilege	2	▲ new
99	Alphabet	2	▲ new
100	Bloomberg	2	▲ new

Special keyword group

Top 5

Malware Type

This is the type of malware that is becoming an issue.

Keyword	Average	Label
Ransomware		3 (30%)
Lobshot		3 (30%)
NetWireRC		2 (20%)
Vawtrak		2 (20%)

Attacker & Actors

The status of the attacker or attack group being issued.

Keyword	Average	Label

Technique

This is an attack technique that is becoming an issue.

Keyword	Average	Label
Exploit		14 (23.7%)
Campaign		14 (23.7%)
Phishing		13 (22%)
RCE		5 (8.5%)
hacking		4 (6.8%)

Country & Company

This is a country or company that is an issue.

Keyword	Average	Label
Google		79 (54.5%)
Microsoft		9 (6.2%)
Mandiant		9 (6.2%)
United States		7 (4.8%)
China		5 (3.4%)

Threat info

Last 5

SNS

(Total : 23)

Total keyword

Google Chrome Email Microsoft Victim attack Attacker Report Campaign Phishing Update hijack Advertising Mandiant Criminal Exploit Browser Israel iran target Malware Lobshot APT Stealer Fortinet CrowdStrike ZeroDay payment Hijacking Password Firefox Safari ...

No	Title	Date
1	Kaspersky @kaspersky Your browser is watching you ????‼️ #GoogleChrome. #MicrosoftEdge, & more. One by one, they’ve cracked down on ad blockers, embraced fingerprinting, and rewritten the rules, all while pocketing your data. So, who’s actually on your side? Swipe to uncover the best private https://t.co/JVYOiWJsM	2025.04.26
2	Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer ????deGoogle Your Life https://t.co/TKfDkwFYYn	2025.04.26
3	Kaspersky @kaspersky ???? Phishing attacks through SVG image files ???? Our experts have detected a sharp rise in attackers using #SVG (Scalable Vector Graphics) files to deliver phishing emails, both to individuals and businesses. Once opened, these files redirect users to fake #Google and #Microsoft https://t.co/hlF	2025.04.25
4	Virus Bulletin @virusbtn Google Mandiant has released the 16th edition of M-Trends, which looks into several trends, data & analysis from incident response engagements. Stolen credentials are now the second highest initial infection vector as the use of infostealers is on the rise https://t.co/33h9ZniSHs https://t.co/zk	2025.04.25
5	MalwareHunterTeam @malwrhunterteam "xai_bypasss_2025" ???? Downloads the "image_viewer.exe" sample from: https://storage.googleapis.com/msgsndr/8hGy0olDfKm2LBrxcCNj/media/680a977d9020da62bd808753.jpeg https://t.co/lQA8iiTqDy	2025.04.25

News

(Total : 56)

Total keyword

Google Malware Report attack Vulnerability Exploit target Campaign Attacker Advertising Phishing Update Chrome Browser Software Email intelligence Mandiant United States Cryptocurrency Gmail Operation Microsoft China RCE Criminal Victim ChatGPT ZeroDay Government MFA Windows hacking GitHub Linux North Korea CISA Education Ransomware 구글 Russia Android Recorded Future Lobshot Password IoC c&c Zero Trust 북한 Amazon Splunk Vawtrak NetWireRC Twitter LinkedIn South Korea Backdoor OpenAI Israel Kaspersky payment DPRK MacOS 크롬 ...

No	Title	Date
1	Gmail für Android und iOS: Google sorgt für mehr Flexibilität und bringt neue Gemini-Funktionen - IT Sicherheitsnews	2025.04.28
2	뷰소닉, 구글TV 내장 스마트 포터블 빔프로젝터 ‘M1 Max’ 한국 시장 신출 - 데일리시큐	2025.04.28
3	Pete Hegseth’s Signal Scandal Spirals Out of Control - Security Latest- WIRED	2025.04.26
4	Is Detection Engineering just glorified googling? - Malware.News	2025.04.26
5	Threat Hunting: For what, when, and how? - Malware.News	2025.04.26

Additional information

No	Title	Date
1	Top Tier Target \| What It Takes to Defend a Cybersecurity Company from Today’s Adversaries - Malware.News	2025.04.28
2	28th April – Threat Intelligence Report - Malware.News	2025.04.28
3	Navigating Through The Fog - Malware.News	2025.04.28
4	Huawei Set to Test Powerful AI Chip to Rival Nvidia’s, WSJ Says - Bloomberg Technology	2025.04.28
5	Gamers Beware! New Attack Targets Gamers to Deploy AgeoStealer Malware - Malware.News	2025.04.26
View only the last 5

No	Title	Date
1	Gmail für Android und iOS: Google sorgt für mehr Flexibilität und bringt neue Gemini-Funktionen - IT Sicherheitsnews	2025.04.28
2	뷰소닉, 구글TV 내장 스마트 포터블 빔프로젝터 ‘M1 Max’ 한국 시장 신출 - 데일리시큐	2025.04.28
3	Pete Hegseth’s Signal Scandal Spirals Out of Control - Security Latest- W...	2025.04.26
4	Is Detection Engineering just glorified googling? - Malware.News	2025.04.26
5	Is Detection Engineering just glorified googling? - Malware.News	2025.04.26
View only the last 5

No	Request	Hash(md5)	Report No	Date
1	2025416-方案1-方案細節.pdf.lnk Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader UPX ASPack Malicious Library Admin Tool (Sysinternals etc ...) Http API PWS Code injection Create Service Socket DGA ScreenShot Escalate priviledges Steal	c77858bbcfb2ab87d9469d6376cbe223	60257	2025.04.28
2	setup.exe Client SW User Data Stealer browser info stealer Generic Malware Downloader Google Chrome User Data ASPack Malicious Library UPX Admin Tool (Sysinternals etc ...) ScreenShot Http API PWS Code injection Create Service Socket DGA Escalate priviledges Steal	eb497402e6fcb1c7cfb3f129bcc4f3f0	60258	2025.04.28
3	Software-MSI.msi Client SW User Data Stealer browser info stealer Generic Malware Downloader Google Chrome User Data Malicious Library Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS VNC Code injection Internet	afc28d87bbf6cb0c9018a0fb1ee216c3	59800	2025.04.21
4	cookies-alert-script.js.pobran... Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection BitCoin Internet API persistenc	223545c1ac7813572f8fd3792dd4f953	59542	2025.04.20
5	anchor.html Client SW User Data Stealer browser info stealer Generic Malware Google Chrome User Data Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection BitCoin Internet API persistenc	d518b91a0e17a2e557ccf1270b99ca99	59570	2025.04.20
View only the last 5

Level	Description
warning	File has been identified by 27 AntiVirus engines on VirusTotal as malicious
watch	Drops a binary and executes it
watch	Found URLs in memory pointing to an IP address rather than a domain (potentially indicative of Command & Control traffic)
watch	One or more non-whitelisted processes were created
watch	Requests access to read memory contents of lsass.exe potentially indicative of credential dumping
watch	Resumed a suspended thread in a remote process potentially indicative of process injection
notice	A process created a hidden window
notice	Allocates read-write-execute memory (usually to unpack itself)
notice	An application raised an exception which may be indicative of an exploit crash
notice	Creates (office) documents on the filesystem
notice	Creates a shortcut to an executable file
notice	Creates a suspicious process
notice	Creates executable files on the filesystem
notice	Drops an executable to the user AppData folder
notice	One or more potentially interesting buffers were extracted
notice	Potentially malicious URLs were found in the process memory dump
notice	Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation
notice	Starts servers listening
notice	Steals private information from local Internet browsers
notice	Yara rule detected in process memory
info	Checks amount of memory in system
info	Checks if process is being debugged by a debugger
info	One or more processes crashed
info	Tries to locate where the browsers are installed

No data

Beta Service, If you select keyword, you can check detailed information.