Cyber Threat Trends

First reported date: 2018/10/01
Inquiry period : 2025/05/05 11:20 ~ 2025/05/06 11:20 (1 days), 1 search results

지난 7일 기간대비 신규 트렌드를 보이고 있습니다.
악성코드 유형 WannaCry BianLian BlackCat WannaCryptor ShadowPad PlugX Ransomware BlackSuit LockBit RedCurl 도 새롭게 확인됩니다.
공격기술 Campaign 도 새롭게 확인됩니다.
기관 및 기업 Check Point Fortinet Paloalto Taiwan China Microsoft United States 도 새롭게 확인됩니다.
기타 EDR Palo Alto 팔로알토 MimiKatz KillAV 등 신규 키워드도 확인됩니다.

BianLian is a GoLang-based ransomware that continues to breach several industries and demand large ransom amounts. The threat actors also use the double extortion method by stealing an affected organization’s files and leaking them online if the ransom is not paid on time. BianLian gains access to victim systems through valid Remote Desktop Protocol (RDP) credentials, uses open-source tools and command-line scripting for discovery and credential harvesting, and exfiltrates victim data via File Transfer Protocol (FTP), Rclone, or Mega. BianLian originally employed a double-extortion model in which they encrypted victims’ systems after exfiltrating the data; however, around January 2023, they shifted to primarily exfiltration-based extortion. The BianLian ransomware uses goroutines and encrypts files in chunks to quickly hijack an infected system. The ransomware adds its own extension to each encrypted file.  Ref.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/05/06 Ransomware Tool Matrix Project Updates: May 2025


참고로 동일한 그룹의 악성코드 타입은 WannaCry Sodinokibi Phobos 등 79개 종이 확인됩니다.