popup

Cyber Threat Trends

  1. Week Month

Gemelli flickerflypro flickerfly

Summary: 2025/04/28 20:04

First reported date: 2010/11/26
Inquiry period : 2025/04/27 20:04 ~ 2025/04/28 20:04 (1 days), 1 search results

지난 7일 기간대비 -200% 낮은 트렌드를 보이고 있습니다.
지난 7일 기간대비 상승한 Top5 연관 키워드는 Phishing RCE 입니다.
기타 WordPress WooCommerce fake 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/28 WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1Vulnerability 1 - 0 (0%)
2Phishing 1 ▲ 1 (100%)
3Campaign 1 - 0 (0%)
4Update 1 - 0 (0%)
5Backdoor 1 ▼ -2 (-200%)
6WordPress 1 ▲ new
7RCE 1 ▲ 1 (100%)
8target 1 - 0 (0%)
9WooCommerce 1 ▲ new
10fake 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

No data.

Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

No data.

Attack technique
Technique

This is an attack technique that is becoming an issue.

Keyword Average Label
Phishing
1 (25%)
Campaign
1 (25%)
Backdoor
1 (25%)
RCE
1 (25%)
Country & Company
Country & Company

This is a country or company that is an issue.

No data.

Threat info
Last 5

SNS

(Total : 0)

No data.

News

(Total : 1)
  Total keyword

Vulnerability Phishing Campaign Update Backdoor WordPress RCE target

No Title Date
1WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors - The Hacker News2025.04.28

Additional information

No Title Date
1Lessons from Ted Lasso for cybersecurity success - Malware.News2025.04.25
2Lessons from Ted Lasso for cybersecurity success - Malware.News2025.04.25
3Lessons from Ted Lasso for cybersecurity success - Malware.News2025.04.25
4Lessons from Ted Lasso for cybersecurity success - Malware.News2025.04.25
5Lessons from Ted Lasso for cybersecurity success - Malware.News2025.04.25
View only the last 5
Level Description
warning File has been identified by 21 AntiVirus engines on VirusTotal as malicious
watch Creates known Upatre files
notice Allocates read-write-execute memory (usually to unpack itself)
notice Checks for the Locally Unique Identifier on the system for a suspicious privilege
notice Creates executable files on the filesystem
notice Drops an executable to the user AppData folder
notice One or more potentially interesting buffers were extracted
notice Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation
notice Resolves a suspicious Top Level Domain (TLD)
notice The binary likely contains encrypted or compressed data indicative of a packer
info Checks amount of memory in system
info Checks if process is being debugged by a debugger
info Queries for the computername
info The file contains an unknown PE resource name possibly indicative of a packer
info This executable has a PDB path
info Uses Windows APIs to generate a cryptographic key
Network ET DNS Query to a *.top domain - Likely Hostile
No data
No URL CC ASN Co Reporter Date
1http://188.28.78.53:8082/sshd
backdoor censys elf sshdkit 		GB GBThreeDaveLikesMalwre2025.04.28
2http://188.28.78.53:8083/sshd
backdoor censys elf sshdkit 		GB GBThreeDaveLikesMalwre2025.04.28
3http://88.24.74.40:10072/sshd
backdoor censys elf sshdkit 		ES ESTelefonica De EspanaDaveLikesMalwre2025.04.28
4http://83.224.151.15/sshd
backdoor censys elf sshdkit 		IT ITVodafone Italia S.p.A.DaveLikesMalwre2025.04.28
5http://92.41.159.90:8084/sshd
backdoor censys elf sshdkit 		GB GBThreeDaveLikesMalwre2025.04.28
View only the last 5
Beta Service, If you select keyword, you can check detailed information.