Silobreaker Update 2021年04月08日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
Yanbian Gang		4	4	4
Golden Chickens		13	25	25
APT-C-23		5	6	10
Twisted Spider		3	3	6
Gaza Cybergang		3	7	7

Name	Move	Volume 1d	Volume 7d	Volume 30d
Cring Ransomware		21	21	21
Stampado Ransomware		3	3	3
Encryptor RaaS ransomware		3	3	3
Erebus Ransomware		3	3	3
GPCode Ransomware		3	3	3

• ThreatActor:Yanbian Gang
• Yanbian Gang Malware Continues with Wide-Scale Distribution and C2
• Published by RiskIQ Blog (2021-04-08 00:00:06)
• Entities:
  • ThreatActor:Yanbian Gang,  Keyphrase:Malware,  Keyphrase:C2 Command & Control,  Company:KB Kookmin Bank,  Keyphrase:Banking App
• ThreatActor:Golden Chickens
• LinkedIn phishing scams are on the rise
• Published by Stuff.co.za (2021-04-07 17:59:00)
• Entities:
  • Keyphrase:LinkedIn Phishing,  Company:eSentire Inc,  ThreatActor:Golden Chickens,  Company:LinkedIn Corp,  Keyphrase:Malware
• ThreatActor:APT-C-23
• Voice-Changing Software Found on APT Attackers’ Server
• Published by Dark Reading (2021-04-08 06:28:00)
• Entities:
  • ThreatActor:APT-C-23,  Company:Cado Security,  ThreatActor:Gaza Cybergang,  Keyphrase:Malware,  Keyphrase:Computer Software
• ThreatActor:Twisted Spider
• So-called ransomware cartel is more of a partnership, say researchers
• Published by IT World Canada – RSS (2021-04-08 01:10:22)
• Entities:
  • ThreatActor:Twisted Spider,  Keyphrase:Cartel,  Keyphrase:Ransomware,  Keyphrase:Partnership,  ThreatActor:Viking Spider
• ThreatActor:Gaza Cybergang
• A Chinese cyberespionage campaign is active against Vietnamese targets. The European Commission acknowledges cyberattacks are under investigation. Data scraping. Bogus apps. Molerats are dudes.
• Published by The CyberWire (2021-04-08 04:20:00)
• Entities:
  • ThreatActor:Gaza Cybergang,  Organization:European Commission,  Keyphrase:Scraping,  Keyphrase:Cyber Espionage,  Keyphrase:Cyber Attack
• Malware:Cring Ransomware
• Cring ransomware infects industrial targets through vulnerability in VPN servers
• Published by Reddit – BlueTeamSec – RSS (2021-04-08 06:09:15)
• Entities:
  • Malware:Cring Ransomware,  Keyphrase:Vulnerability,  Keyphrase:Infectious
• Malware:Stampado Ransomware
• The ransomware saga
• Published by Kaspersky.com (2021-04-07 19:50:00)
• Entities:
  • Keyphrase:Ransomware,  Keyphrase:Encryption,  Keyphrase:Malware,  Keyphrase:Cybercrime,  Malware:WannaCry Ransomware
• Malware:Encryptor RaaS ransomware
• The ransomware saga
• Published by Kaspersky.com (2021-04-07 19:50:00)
• Entities:
  • Keyphrase:Ransomware,  Keyphrase:Encryption,  Keyphrase:Malware,  Keyphrase:Cybercrime,  Malware:WannaCry Ransomware
• Malware:Erebus Ransomware
• The ransomware saga
• Published by Kaspersky.com (2021-04-07 19:50:00)
• Entities:
  • Keyphrase:Ransomware,  Keyphrase:Encryption,  Keyphrase:Malware,  Keyphrase:Cybercrime,  Malware:WannaCry Ransomware
• Malware:GPCode Ransomware
• The ransomware saga
• Published by Kaspersky.com (2021-04-07 19:50:00)
• Entities:
  • Keyphrase:Ransomware,  Keyphrase:Encryption,  Keyphrase:Malware,  Keyphrase:Cybercrime,  Malware:WannaCry Ransomware