Silobreaker Update 2021年04月15日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
Bitter APT		11	15	18
Unit 26165		2	2	3
BlackTech APT		6	13	18
Rampant Kitten		4	8	9
TA551		2	2	8

Name	Move	Volume 1d	Volume 7d	Volume 30d
Babuk Locker		20	21	45
TSCookie		6	14	15
GuLoader		2	4	5
Sunburst Backdoor		14	42	160
IcedID Trojan		13	113	209

• ThreatActor:Bitter APT
• Zero-Day Vulnerability in Desktop Window Manager Used In-the-Wild
• Published by IBM X-Force Exchange – Advisory Tag – RSS (2021-04-15 04:24:10)
• Entities:
  • Keyphrase:Zero-Day,  Vulnerability:CVE-2021-28310,  ThreatActor:Bitter APT,  Company:Kaspersky Lab,  Keyphrase:Exploit
• ThreatActor:Unit 26165
• Sweden Summons Russian Ambassador Over Alleged Cyberattacks on Sports Confederation- Linde
• Published by UrduPoint.com (2021-04-14 17:31:00)
• Entities:
  • Keyphrase:Russian,  Keyphrase:Confederation,  Keyphrase:Sport,  Keyphrase:Cyber Attack,  Organization:Swedish Ministry for Foreign Affairs
• ThreatActor:BlackTech APT
• virusbtn – ESET researchers discover BlackTech APT’s TSCookie malware for FreeBSD https://t.co/9NB8lSw9JP
• Published by virusbtn – Twitter (2021-04-14 20:14:01)
• Entities:
  • Malware:TSCookie,  ThreatActor:BlackTech APT,  Username:@virusbtn,  Product:FreeBSD,  Company:ESET
• ThreatActor:Rampant Kitten
• Four out of 10 mobile devices prone to attack: Check Point
• Published by Techcircle.in (2021-04-14 19:09:00)
• Entities:
  • Company:Check Point Software Technologies Ltd,  Keyphrase:Attack,  Keyphrase:Mobile Security,  Keyphrase:APT Advanced Persistent Threat,  Keyphrase:Threat
• ThreatActor:TA551
• malware_traffic – 2021-04-14 (Wednesday) – Another wave of German languag e#TA551 (#Shathak) malspam pushing #Ursnif/#Gozi/#ISFB – Th… https://t.co/OttlFgUFLs
• Published by malware_traffic – Twitter (2021-04-15 02:03:52)
• Entities:
  • ThreatActor:TA551,  HashTag:#shathak,  HashTag:#isfb,  HashTag:#gozi,  HashTag:#ursnif
• Malware:Babuk Locker
• PSA: Severe bug in Babuk ransomware decryptor leads to data loss
• Published by Emsisoft Security Blog – RSS (2021-04-14 09:18:29)
• Entities:
  • Malware:Babuk Locker,  Keyphrase:Bug,  Keyphrase:Losses,  Company:Emsisoft,  Keyphrase:Security
• Malware:TSCookie
• virusbtn – ESET researchers discover BlackTech APT’s TSCookie malware for FreeBSD https://t.co/9NB8lSw9JP
• Published by virusbtn – Twitter (2021-04-14 20:14:01)
• Entities:
  • Malware:TSCookie,  ThreatActor:BlackTech APT,  Username:@virusbtn,  Product:FreeBSD,  Company:ESET
• Malware:GuLoader
• gh0std4ncer – RT @campuscodi: CERT-Poland analysis of the CloudEye (originally GuLoader) malware downloader

  https://t.co/0bQ2BPGqlD https://t.co/0sJKUYp…

• Published by gh0std4ncer – Twitter (2021-04-15 03:47:42)
• Entities:
  • UrlFull:https://cert.pl/en/posts/2021/04/keeping-an-eye-on-guloader-reverse-engineering-the-loader/,  Domain:CERT.pl,  Malware:GuLoader,  Username:@campuscodi,  Username:@gh0std4ncer
• Malware:Sunburst Backdoor
• Sunburst Hack Costs SolarWinds At Least $18M
• Published by CFO – RSS (2021-04-14 21:23:28)
• Entities:
  • Company:SolarWinds Inc,  Malware:Sunburst Backdoor,  Keyphrase:Hack,  Product:Solarwinds Orion,  Keyphrase:Compromise
• Malware:IcedID Trojan
• IcedID banking Trojan joins most wanted list
• Published by ITWeb – RSS (2021-04-14 17:45:38)
• Entities:
  • Malware:IcedID Trojan,  Keyphrase:Ransomware,  Keyphrase:Malware,  Keyphrase:Compliance

---