Cyber Threat Trends

Summary: 2025/04/29 12:54

First reported date: 2015/11/30
Inquiry period : 2025/04/22 12:54 ~ 2025/04/29 12:54 (7 days), 6 search results

전 기간대비 신규 트렌드를 보이고 있습니다.
악성코드 유형 CACTUS Ransomware 도 새롭게 확인됩니다.
공격기술 Exploit Backdoor 도 새롭게 확인됩니다.
기관 및 기업 Cisco 도 새롭게 확인됩니다.
기타 ToyMaker Malware access Talos Initial 등 신규 키워드도 확인됩니다.

* 최근 뉴스기사 Top3:
ㆍ 2025/04/26 ToyMaker Uses LAGTOY to Sell Access to CACTUS Ransomware Gangs for Double Extortion

Date range button:

First seen:

Last seen:

Keyword

Trend graph by period

Related keyword cloud

Top 100

#	Trend	Count	Comparison
1	ToyMaker	6	▲ new
2	CACTUS	5	▲ new
3	Malware	4	▲ new
4	access	4	▲ new
5	Ransomware	4	▲ new
6	Talos	3	▲ new
7	Initial	3	▲ new
8	LAGTOY	2	▲ new
9	IAB	2	▲ new
10	Cisco	2	▲ new
11	Exploit	2	▲ new
12	ThreatProtection	1	▲ new
13	Blog	1	▲ new
14	custom	1	▲ new
15	Introducing	1	▲ new
16	Backdoor	1	▲ new
17	stealthy	1	▲ new
18	hackerforhire	1	▲ new
19	attack	1	▲ new

Special keyword group

Top 5

Malware Type

This is the type of malware that is becoming an issue.

Keyword	Average	Label
CACTUS		5 (55.6%)
Ransomware		4 (44.4%)

Attacker & Actors

The status of the attacker or attack group being issued.

No data.

Technique

This is an attack technique that is becoming an issue.

Keyword	Average	Label
Exploit		2 (66.7%)
Backdoor		1 (33.3%)

Country & Company

This is a country or company that is an issue.

Keyword	Average	Label
Cisco		2 (100%)

Threat info

Last 5

SNS

(Total : 5)

Total keyword

CACTUS Ransomware Malware Cisco Exploit Backdoor attack

No	Title	Date
1	The Hacker News @TheHackersNews A stealthy hacker-for-hire ToyMaker is selling access to top targets — leading straight to CACTUS ransomware attacks. ???? They scan, hack, and hand over. ????️ Malware: LAGTOY These brokers are speeding up ransomware ops. No espionage, just cash. Learn more: https://t.co/iKUBTC9UHq	2025.04.26
2	Cyber_OSINT @Cyber_O51NT Cisco Talos has uncovered "ToyMaker," an initial access broker collaborating with double extortion gangs, exploiting vulnerable systems and facilitating access handovers to the Cactus ransomware group. #CyberSecurity #Malware https://t.co/RN0Fpihtlg	2025.04.24
3	Virus Bulletin @virusbtn Cisco Talos researchers reveal ToyMaker, an initial access broker that exploits vulnerable systems exposed to the internet, extracts credentials, installs the LAGTOY backdoor, and hands over access to secondary threat actor Cactus. https://t.co/fSyEBaZRhc https://t.co/G8tApjTkUx	2025.04.24
4	Kimberly @StopMalvertisin Talos Blog \| Introducing ToyMaker, an Initial Access Broker working in cahoots with double extortion gangs https://t.co/bIka2EyAiA	2025.04.23
5	Threat Intelligence @threatintel #ThreatProtection #ToyMaker IAB leverages #LAGTOY custom implant to pave way for #Cactus #ransomware, read more: https://t.co/iMWEsQ9c2a #malware	2025.04.23

News

(Total : 1)

Total keyword

Malware CACTUS Ransomware

No	Title	Date
1	ToyMaker Uses LAGTOY to Sell Access to CACTUS Ransomware Gangs for Double Extortion - The Hacker News	2025.04.26

Additional information

No	Title	Date
1	People should be ‘outraged’ by efforts to shrink federal cyber teams, former CISA head says - Malware.News	2025.04.29
2	NXP Announces New CEO, Warns of ‘Very Uncertain Environment’ - Bloomberg Technology	2025.04.29
3	FBI Reports ₹1.38 Lakh Crore Loss in 2024, a 33% Surge from 2023 - Malware.News	2025.04.29
4	US intensifies Salt Typhoon crackdown with public info request - Malware.News	2025.04.29
5	Trump moves threaten US cyber defenses, says former CISA director Easterly - Malware.News	2025.04.29
View only the last 5

No data

Beta Service, If you select keyword, you can check detailed information.