Cyber Threat Trends

Summary: 2025/04/28 20:14

First reported date: 2003/08/22
Inquiry period : 2025/04/21 20:14 ~ 2025/04/28 20:14 (7 days), 345 search results

전 기간대비 -10% 낮은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Ransomware hacking Victim Google North Korea 입니다.
악성코드 유형 DslogdRAT CACTUS 도 새롭게 확인됩니다.

software that is intended to damage or disable computers and computer systems.

* 최근 뉴스기사 Top3:
    ㆍ 2025/04/28 Top Tier Target | What It Takes to Defend a Cybersecurity Company from Today’s Adversaries
    ㆍ 2025/04/28 Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools
    ㆍ 2025/04/28 28th April – Threat Intelligence Report

Date range button:

First seen:

Last seen:

Keyword

Trend graph by period

Related keyword cloud

Top 100

#	Trend	Count	Comparison
1	Malware	345	▼ -34 (-10%)
2	Report	108	▼ -17 (-16%)
3	MWNEWS	89	▼ -52 (-58%)
4	attack	89	▼ -3 (-3%)
5	Campaign	67	▼ -6 (-9%)
6	target	59	▼ -12 (-20%)
7	Exploit	56	▼ -1 (-2%)
8	Update	52	▼ -10 (-19%)
9	Vulnerability	47	▼ -7 (-15%)
10	Operation	45	▼ -4 (-9%)
11	intelligence	43	▼ -8 (-19%)
12	United States	39	▼ -3 (-8%)
13	Ransomware	37	▲ 1 (3%)
14	RCE	36	▼ -13 (-36%)
15	Phishing	34	▼ -15 (-44%)
16	Software	33	▼ -9 (-27%)
17	Advertising	29	▼ -9 (-31%)
18	hacking	29	▲ 2 (7%)
19	Microsoft	25	▼ -17 (-68%)
20	Email	25	▼ -1 (-4%)
21	Victim	25	▲ 1 (4%)
22	Google	24	▲ 9 (38%)
23	Government	22	▼ -11 (-50%)
24	Kaspersky	22	▼ -8 (-36%)
25	North Korea	22	▲ 6 (27%)
26	Cryptocurrency	19	▲ 8 (42%)
27	Threat	19	▼ -1 (-5%)
28	China	18	▼ -19 (-106%)
29	Android	18	▼ -7 (-39%)
30	Russia	18	▼ -9 (-50%)
31	Criminal	18	▼ -4 (-22%)
32	AI	17	▼ -1 (-6%)
33	Distribution	17	▲ 6 (35%)
34	Education	15	▼ -1 (-7%)
35	NetWireRC	15	▼ -6 (-40%)
36	ZeroDay	15	▲ 3 (20%)
37	CISA	15	▼ -7 (-47%)
38	Windows	15	▼ -20 (-133%)
39	South Korea	14	▲ 6 (43%)
40	Browser	13	- 0 (0%)
41	advisory	13	- 0 (0%)
42	Linux	12	▼ -9 (-75%)
43	Social Engineering	12	▲ 2 (17%)
44	Recorded Future	11	▲ 3 (27%)
45	NortonLifeLock	11	▲ 5 (45%)
46	securityaffairs	11	▲ 2 (18%)
47	c&c	11	▼ -7 (-64%)
48	IoC	11	▼ -5 (-45%)
49	Lazarus	10	▲ 9 (90%)
50	ThreatProtection	10	▲ 4 (40%)
51	Stealer	10	▼ -2 (-20%)
52	payment	10	▲ 4 (40%)
53	GitHub	9	▼ -6 (-67%)
54	Supply chain	9	▲ 3 (33%)
55	Version	9	▲ 6 (67%)
56	Japan	9	▲ 4 (44%)
57	MFA	9	▲ 3 (33%)
58	North	8	▲ 4 (50%)
59	GameoverP2P	8	▼ -2 (-25%)
60	EDR	8	▼ -1 (-13%)
61	Access	8	▲ 3 (38%)
62	DslogdRAT	8	▲ new
63	py	8	▲ 7 (88%)
64	Amazon	7	▲ 5 (71%)
65	DarkWeb	7	▲ 1 (14%)
66	Korean	7	▲ 6 (86%)
67	YouTube	7	▲ 2 (29%)
68	Telegram	7	▼ -3 (-43%)
69	dprk	7	▲ 2 (29%)
70	ChatGPT	7	▲ 1 (14%)
71	Cisco	7	▼ -2 (-29%)
72	RATel	7	▲ 1 (14%)
73	code	7	▲ 1 (14%)
74	Backdoor	7	▼ -8 (-114%)
75	malicious	7	▲ 3 (43%)
76	Vawtrak	7	- 0 (0%)
77	fake	7	▲ 4 (57%)
78	activity	7	▲ 6 (86%)
79	United Kingdom	6	▼ -7 (-117%)
80	cti	6	▲ 2 (33%)
81	Mandiant	6	▲ 5 (83%)
82	data	6	▲ 1 (17%)
83	LinkedIn	6	▼ -3 (-50%)
84	Password	6	▼ -4 (-67%)
85	AhnLab	6	▲ 1 (17%)
86	APT	6	- 0 (0%)
87	Trojan	6	▼ -8 (-133%)
88	CVE	6	▼ -8 (-133%)
89	Europe	6	▼ -9 (-150%)
90	Red Team	6	▲ 4 (67%)
91	powershell	6	▼ -3 (-50%)
92	Critical	6	- 0 (0%)
93	CrowdStrike	6	▲ 1 (17%)
94	CACTUS	6	▲ new
95	Smishing	6	▲ 3 (50%)
96	South	5	▲ 4 (80%)
97	Stormcast	5	- 0 (0%)
98	ISC	5	- 0 (0%)
99	DOGE	5	▲ 3 (60%)
100	Takedown	5	▼ -6 (-120%)

Special keyword group

Top 5

Malware Type

This is the type of malware that is becoming an issue.

Keyword	Average	Label
Ransomware		37 (30.1%)
NetWireRC		15 (12.2%)
GameoverP2P		8 (6.5%)
DslogdRAT		8 (6.5%)
RATel		7 (5.7%)

Attacker & Actors

The status of the attacker or attack group being issued.

Keyword	Average	Label
Lazarus		10 (66.7%)
Kimsuky		5 (33.3%)

Technique

This is an attack technique that is becoming an issue.

Keyword	Average	Label
Campaign		67 (24.9%)
Exploit		56 (20.8%)
RCE		36 (13.4%)
Phishing		34 (12.6%)
hacking		29 (10.8%)

Country & Company

This is a country or company that is an issue.

Keyword	Average	Label
United States		39 (12.7%)
Microsoft		25 (8.2%)
Google		24 (7.8%)
Government		22 (7.2%)
Kaspersky		22 (7.2%)

Threat info

Last 5

SNS

(Total : 78)

Total keyword

Malware Campaign Report hacking attack North Korea Exploit Ransomware Android Kaspersky Target Phishing NetWireRC Russia Stealer Distribution DslogdRAT dprk Attacker APT Japan Cryptocurrency CACTUS ZeroDay Update Telegram FormBook Advertising ClickFix Vawtrak Cryptocurrency Miner South Korea Lazarus Intelligence Konni Social Engineering IoC Software catch Browser Vulnerability SECUI Lumma AhnLab c&c C2 HyperSSL Attacks spyware Botnet GameoverP2P Kimsuky ...

No	Title	Date
1	Cyber_OSINT @Cyber_O51NT A report reveals that the APT-C-56 (Transparent Tribe) group is using new malware for persistent attacks, often leveraging private chat apps that claim to encrypt communications for espionage activities. #CyberSecurity https://t.co/w09dbKa1YF	2025.04.28
2	Cyber_OSINT @Cyber_O51NT A report reveals that in March 2025, senior members of the World Uyghur Congress were targeted by a spearphishing campaign delivering malware via a trojanized Uyghur language tool, exposing ongoing digital repression faced by the Uyghur diaspora. #Uyghur… https://t.co/JpZiS8cVGe	2025.04.28
3	Pierluigi Paganini - Security Affairs @securityaffairs SECURITY AFFAIRS #MALWARE #NEWSLETTER ROUND 43 https://t.co/HyLIVq8bPi #securityaffairs #hacking	2025.04.27
4	Dark Web Informer - Cyber Threat Intelligence @DarkWebInformer ???? HiddenMiner Malware, Modified XMR Crypto Mining Tool for Sale A threat actor is selling HiddenMiner, a customized Monero (XMR) miner with advanced evasion and stealth features. ???? Key Features: ???? One-click installation ???? Virtual Machine bypass (AntiVM) ???? No admin https://t.co/A3	2025.04.27
5	Unit 42 @Unit42_Intel A new Slow Pisces (#JadeSleet) campaign utilizes social engineering tactics to engage with targets and deliver malware disguised as coding challenges for crypto sector developers. Our analysis includes an overview of previously undocumented malware. https://t.co/O2Q57BSwdw https://t.co/yJpI6unAXE	2025.04.26

News

(Total : 267)

Total keyword

Malware Report attack target Campaign Update Exploit Vulnerability Operation intelligence Attacker United States RCE Software Ransomware Phishing Advertising Microsoft Email Victim Google Government China Criminal hacking Cryptocurrency CISA Education Windows Kaspersky North Korea ZeroDay Linux South Korea Distribution Russia Browser Recorded Future Social Engineering Android payment MFA c&c IoC GitHub Supply chain EDR NetWireRC Lazarus Backdoor DarkWeb ChatGPT Amazon YouTube RATel CVE Smishing Password LinkedIn Cisco United Kingdom Europe Red Team GameoverP2P CrowdStrike Banking Vawtrak powershell US DYEPACK Trojan Japan Mandiant CVSS Takedown iPhone Stealer DDoS AhnLab Germany ...

No	Title	Date
1	Top Tier Target \| What It Takes to Defend a Cybersecurity Company from Today’s Adversaries - Malware.News	2025.04.28
2	Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools - The Hacker News	2025.04.28
3	Mit Malware: Cybersecurity-CEO soll Krankenhaus-PCs infiltriert haben - IT Sicherheitsnews	2025.04.28
4	28th April – Threat Intelligence Report - Malware.News	2025.04.28
5	The 2026 FIFA World Cup is coming to North America, and so are the ticket scams - Malware.News	2025.04.28

Additional information

No	Title	Date
1	Top Tier Target \| What It Takes to Defend a Cybersecurity Company from Today’s Adversaries - Malware.News	2025.04.28
2	28th April – Threat Intelligence Report - Malware.News	2025.04.28
3	Navigating Through The Fog - Malware.News	2025.04.28
4	Huawei Set to Test Powerful AI Chip to Rival Nvidia’s, WSJ Says - Bloomberg Technology	2025.04.28
5	Gamers Beware! New Attack Targets Gamers to Deploy AgeoStealer Malware - Malware.News	2025.04.26
View only the last 5

No	Title	Date
1	Top Tier Target \| What It Takes to Defend a Cybersecurity Company from Today’s Adversaries - Malware.News	2025.04.28
2	Top Tier Target \| What It Takes to Defend a Cybersecurity Company from Today’s Adversaries - Malware.News	2025.04.28
3	Top Tier Target \| What It Takes to Defend a Cybersecurity Company from Today’s Adversaries - Malware.News	2025.04.28
4	Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools - The Hacker News	2025.04.28
5	28th April – Threat Intelligence Report - Malware.News	2025.04.28
View only the last 5

No data

No	URL	CC	ASN Co	Reporter	Date
1	http://45.55.147.15:8000/test2.exe exe malware open-dir Sliver	US	DIGITALOCEAN-ASN	Joker	2025.03.28
2	http://45.55.147.15:8000/work1.exe exe malware open-dir Sliver	US	DIGITALOCEAN-ASN	Joker	2025.03.28
3	http://45.55.147.15:8000/test1.exe exe malware open-dir Sliver	US	DIGITALOCEAN-ASN	Joker	2025.03.28
4	http://115.233.60.197:8001/gkd.exe CobaltStrike exe malware opendir turtleloader	CN	No.31,Jin-rong Street	Joker	2025.03.26
5	http://115.233.60.197:8001/de.exe CobaltStrike exe malware opendir turtleloader	CN	No.31,Jin-rong Street	Joker	2025.03.26
View only the last 5

Beta Service, If you select keyword, you can check detailed information.