Silobreaker Update 2021年03月12日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
Calypso APT		14	24	26
DLTMiner		11	20	20
Websiic		8	12	12
Mikroceen APT		8	14	14
FIN8		16	39	39

Name	Move	Volume 1d	Volume 7d	Volume 30d
NanoCore RAT		18	18	20
Lemon Duck Malware		6	6	7
RedXOR Backdoor		23	37	37
Clast82		11	53	53
NimzaLoader		10	20	27

• ThreatActor:Calypso APT
• ESET Canada Researchers Discover Thousands of Email Servers Under Seige
• Published by EChannelnews.com (2021-03-12 00:50:00)
• Entities:
  • Company:ESET,  Keyphrase:Compromise,  Product:Microsoft Exchange Server Enterprise,  ThreatActor:Calypso APT,  Keyphrase:Vulnerability
• ThreatActor:DLTMiner
• Norwegian government falls victim to Microsoft attacks
• Published by Computer Weekly (2021-03-11 14:43:00)
• Entities:
  • Organization:Storting,  Keyphrase:Attack,  Company:ESET,  Company:Microsoft Corporation,  Keyphrase:Cyber Attack
• ThreatActor:Websiic
• ESET Canada Researchers Discover Thousands of Email Servers Under Seige
• Published by EChannelnews.com (2021-03-12 00:50:00)
• Entities:
  • Company:ESET,  Keyphrase:Compromise,  Product:Microsoft Exchange Server Enterprise,  ThreatActor:Calypso APT,  Keyphrase:Vulnerability
• ThreatActor:Mikroceen APT
• Over 10 different threat groups exploit Microsoft mail server flaws, researchers say
• Published by The Hindu (2021-03-11 20:07:00)
• Entities:
  • Company:Microsoft Corporation,  Company:ESET,  ThreatActor:Mikroceen APT,  Keyphrase:Threat Actor,  Keyphrase:Exploit
• ThreatActor:FIN8
• threatpost – The FIN8 #cyberattack group has resurfaced, using new BadHatch backdoor versions to compromise firms in the chemica… https://t.co/qTV8hGgUGv
• Published by threatpost – Twitter (2021-03-12 01:07:21)
• Entities:
  • ThreatActor:FIN8,  Malware:BADHATCH Malware,  HashTag:#technology,  Username:@threatpost,  HashTag:#cyberattack
• Malware:NanoCore RAT
• Icon files abused in malspam to spread NanoCore Trojan
• Published by ZDNet Security (2021-03-11 23:00:05)
• Entities:
  • Malware:NanoCore RAT,  AttackType:Malspam,  Keyphrase:Abuse,  Malware:LokiBot Trojan
• Malware:Lemon Duck Malware
• Threat Trends: DNS Security
• Published by Cisco Blog Security (2021-03-11 22:00:11)
• Entities:
  • Keyphrase:Threat,  Malware:EMOTET Trojan,  Malware:Ryuk Ransomware,  AttackType:Phishing,  Keyphrase:Cryptomining
• Malware:RedXOR Backdoor
• Chinese hackers using RedXOR backdoor against Linux systems
• Published by HackRead (2021-03-12 02:13:52)
• Entities:
  • Malware:RedXOR Backdoor,  Keyphrase:Linux OS,  Keyphrase:Chinese,  Keyphrase:Computer Hacker,  Keyphrase:Malware
• Malware:Clast82
• Clast82 Malware Dropper In 9 Utility Apps On Google Play Store
• Published by Information Security Buzz (2021-03-11 18:57:41)
• Entities:
  • Malware:Clast82,  Keyphrase:Malware Dropper,  Product:Google Play,  Keyphrase:Information Security,  Company:Google Inc
• Malware:NimzaLoader
• The ‘TA800’ Group Is Using a New Initial Access Tool Called ‘NimzaLoader’
• Published by TechNadu (2021-03-11 18:03:00)
• Entities:
  • Malware:NimzaLoader,  ThreatActor:TA800,  Keyphrase:Initial Access,  Company:Proofpoint Inc,  Keyphrase:C2 Command & Control