Silobreaker Update 2021年04月14日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
TEMP.Veles		4	4	5
BlackTech APT		7	7	12
Bitter APT		4	4	7
Triton APT		4	5	7
UNC2452		9	13	33

Name	Move	Volume 1d	Volume 7d	Volume 30d
Android FakeApp		14	15	20
CryptoDefense		12	13	14
TSCookie		8	8	9
BRATA Malware		10	15	15
Wroba Banking Trojan		10	14	17

• ThreatActor:TEMP.Veles
• Hacking Operational Technology for Defense: Lessons Learned From OT Red Teaming Smart Meter Control Infrastructure
• Published by FireEye Blog (2021-04-14 00:50:36)
• Entities:
  • Company:Mandiant Corp,  Keyphrase:Red Team,  Keyphrase:Demilitarized Zone,  Keyphrase:Attack,  Keyphrase:Compromise
• ThreatActor:BlackTech APT
• ESETresearch – #ESETresearch discovered BlackTech APT’s TSCookie malware for FreeBSD platform
  638cfbe609d7f3e88767133be5ea5f9a75f1… https://t.co/AhabIjGmMF
• Published by ESETResearch – Twitter (2021-04-14 04:32:08)
• Entities:
  • Malware:TSCookie,  ThreatActor:BlackTech APT,  Username:@cherepanov74,  HashTag:#ESETResearch,  Username:@ESETResearch
• ThreatActor:Bitter APT
• kaspersky – While analyzing the CVE-2021-1732 exploit used by the BITTER APT group, our researchers discovered another zero-day… https://t.co/HACJtWRqwZ
• Published by kaspersky – Twitter (2021-04-14 04:32:04)
• Entities:
  • ThreatActor:Bitter APT,  Vulnerability:CVE-2021-1732,  Username:@kaspersky,  Keyphrase:Zero-Day,  Keyphrase:Exploit
• ThreatActor:Triton APT
• Hacking Operational Technology for Defense: Lessons Learned From OT Red Teaming Smart Meter Control Infrastructure
• Published by FireEye Blog (2021-04-14 00:50:36)
• Entities:
  • Company:Mandiant Corp,  Keyphrase:Red Team,  Keyphrase:Demilitarized Zone,  Keyphrase:Attack,  Keyphrase:Compromise
• ThreatActor:UNC2452
• FireEye report reveals the proliferation of ransomware, remediation techniques
• Published by CISO – Economic Times (2021-04-13 21:16:00)
• Entities:
  • Company:Mandiant Corp,  Company:FireEye Inc,  Keyphrase:Ransomware,  Keyphrase:Intrusion,  ThreatActor:UNC2452
• Malware:Android FakeApp
• Doctor Web’s March 2021 review of virus activity on mobile devices
• Published by News of Doctor Web (2021-04-13 20:38:31)
• Entities:
  • Malware:The Joker Malware,  AttackType:Trojan Horse,  Malware:Android FakeApp,  Product:Google Android,  Company:Doctor Web
• Malware:CryptoDefense
• 3.1 Million External Cyber Attacks On Cloud User Accounts, Says McAfee
• Published by NewsGram (2021-04-13 16:15:00)
• Entities:
  • Keyphrase:Cyber Attack,  Malware:CryptoDefense,  Keyphrase:Ransomware,  Keyphrase:Mobile Malware,  Keyphrase:Accounts
• Malware:TSCookie
• ESETresearch – Linux variants of TSCookie malware were analyzed by @jpcert_en 2/2
  https://t.co/XkIccRZCEd
• Published by ESETResearch – Twitter (2021-04-14 04:32:08)
• Entities:
  • Malware:TSCookie,  Username:@jpcert_en,  Username:@ESETResearch,  Keyphrase:Linux OS,  Keyphrase:Malware
• Malware:BRATA Malware
• BRATA malware disguises itself as security tools on Google Play
• Published by IT Pro UK (2021-04-13 19:53:00)
• Entities:
  • Malware:BRATA Malware,  Product:Google Play,  Keyphrase:Security,  Keyphrase:C2 Command & Control,  Product:Google Android
• Malware:Wroba Banking Trojan
• Businesses are facing cyber threats from all directions
• Published by ITProPortal.com (2021-04-13 20:39:00)
• Entities:
  • Company:McAfee Inc,  Keyphrase:Cyber Threat,  Keyphrase:Threat,  Keyphrase:Malware,  Product:Windows Powershell