Silobreaker Update 2021年03月10日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
Anonymous Palestine		1	1	1
PanGu Team		1	1	1
Spiral Group		33	52	53
Volodya		2	2	3
Calypso APT		1	4	4

Name	Move	Volume 1d	Volume 7d	Volume 30d
MRAT Mobile Remote Access Trojan		14	14	14
AlienBot Trojan		3	3	3
UnityMiner		19	25	25
Zloader Malware		20	31	35
Sarbloh Ransomware		9	16	16

• ThreatActor:Anonymous Palestine
• AnonymousPales1 – RT @YourAnonAlan: Site unavailable.
  Please try again later. <3

  #TangoDown: Myanmar Army
  https://t.co/vAsgZjdQ9H

  #OpMyanmar #Anonymous
  @Yo…

• Published by AnonymousPales1 – Twitter (2021-03-10 01:01:58)
• Entities:
  • Username:@YourAnonAlan,  UrlFull:https://twitter.com/YourAnonAlan/status/1367888507763589120/photo/1,  Username:@HatConical,  HashTag:#AllANonymous,  Username:@YounesAnonymous
• ThreatActor:PanGu Team
• iOS 14 Has Already Been Jailbroken
• Published by Simple News (2021-03-10 02:28:00)
• Entities:
  • Keyphrase:Jailbreak,  Product:Apple iOS 14,  Product:iPhone,  Product:Checkra1n,  Keyphrase:Operating System
• ThreatActor:Spiral Group
• peterkruse – SUPERNOVA Web Shell Deployment Linked to SPIRAL Threat Group, https://t.co/A8NIW9S5jq #solarwinds
• Published by peterkruse – Twitter (2021-03-09 19:39:21)
• Entities:
  • ThreatActor:Spiral Group,  HashTag:#solarwinds,  Username:@peterkruse,  Keyphrase:Web Shell,  UrlFull:https://www.secureworks.com/blog/supernova-web-shell-deployment-linked-to-spiral-threat-group
• ThreatActor:Volodya
• Eyes wide open
• Published by Spectator USA (2021-03-10 02:29:28)
• Entities:
  • Keyphrase:Film,  Person:Stanley Kubrick,  Person:Tom Cruise,  Person:Jerry Weintraub,  Person:Vladimir Nabokov
• ThreatActor:Calypso APT
• How auto-scanning and scripting helped Exchange attackers rack up victims
• Published by SC Magazine US (2021-03-09 08:44:00)
• Entities:
  • Keyphrase:Attack,  Keyphrase:Exploit,  Keyphrase:Vulnerability,  Keyphrase:Web Shell,  Keyphrase:N-Day
• Malware:MRAT Mobile Remote Access Trojan
• Clast82 – A new Dropper on Google Play Dropping the AlienBot Banker and MRAT
• Published by TerabitWeb Blog – RSS (2021-03-09 20:00:23)
• Entities:
  • Malware:MRAT Mobile Remote Access Trojan,  Product:Google Play,  Keyphrase:Banker,  Company:Check Point Software Technologies Ltd
• Malware:AlienBot Trojan
• Android users hit by banking trojan in 10 Play Store apps
• Published by HackRead (2021-03-10 03:53:43)
• Entities:
  • Product:Google Play,  Malware:AlienBot Trojan,  AttackType:Banking Trojan,  Malware:MRAT Mobile Remote Access Trojan,  Product:Google Android
• Malware:UnityMiner
• UnityMiner Cryptocurrency Malware Hijacks QNAP Storage Devices
• Published by SecurityPhresh (2021-03-09 18:55:07)
• Entities:
  • Malware:UnityMiner,  Keyphrase:Cryptocurrency Malware,  Keyphrase:Hijacking,  AttackType:Remote Code Execution
• Malware:Zloader Malware
• ZLoader Malware Hidden in Encrypted Excel File
• Published by DShield (2021-03-10 03:32:00)
• Entities:
  • Malware:Zloader Malware,  Keyphrase:Encryption,  Company:Forcepoint,  Keyphrase:Phishing Campaign,  Product:Microsoft Office
• Malware:Sarbloh Ransomware
• Sarbloh ransomware aims at supporting Indian Farmers’ Protest
• Published by HackRead (2021-03-10 06:52:00)
• Entities:
  • Malware:Sarbloh Ransomware,  Keyphrase:Farmer,  Keyphrase:Protest,  Keyphrase:Ransomware,  Subdomain:s3.ap-south-1.amazonaws.com