Silobreaker Update 2021年05月13日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
UNC2628		5	7	7
UNC2659		5	7	7
UNC2465		5	7	7
Fox Kitten APT		2	2	3
Bureau 325		2	2	3

Name	Move	Volume 1d	Volume 7d	Volume 30d
Smokedham Backdoor		5	5	5
DarkSide Ransomware		175	615	680
Moriya Rootkit		16	52	52
Mailto Ransomware		12	21	47
TeaBot		7	24	24

• ThreatActor:UNC2628
• Researchers track down five affiliates of DarkSide ransomware service
• Published by ZDNet (2021-05-12 20:17:00)
• Entities:
  • Keyphrase:Ransomware,  Malware:DarkSide Ransomware,  ThreatActor:DarkSide (hacker group),  Keyphrase:Ransomware-as-a-Service,  ThreatActor:UNC2628
• ThreatActor:UNC2659
• Researchers track down five affiliates of DarkSide ransomware service
• Published by ZDNet (2021-05-12 20:17:00)
• Entities:
  • Keyphrase:Ransomware,  Malware:DarkSide Ransomware,  ThreatActor:DarkSide (hacker group),  Keyphrase:Ransomware-as-a-Service,  ThreatActor:UNC2628
• ThreatActor:UNC2465
• Researchers track down five affiliates of DarkSide ransomware service
• Published by ZDNet (2021-05-12 20:17:00)
• Entities:
  • Keyphrase:Ransomware,  Malware:DarkSide Ransomware,  ThreatActor:DarkSide (hacker group),  Keyphrase:Ransomware-as-a-Service,  ThreatActor:UNC2628
• ThreatActor:Fox Kitten APT
• Ransomware world in 2021: who, how and why
• Published by Securelist (2021-05-12 19:16:00)
• Entities:
  • Keyphrase:Ransomware,  Malware:Babuk Locker,  Malware:Sodinokibi Ransomware,  Keyphrase:Ransomware-as-a-Service,  Keyphrase:Ecosystem
• ThreatActor:Bureau 325
• May 12, 2021 Beyond Lazarus Read more
• Published by PortSwigger (2021-05-12 21:17:00)
• Entities:
  • Country:North Korea,  ThreatActor:Lazarus Group,  Keyphrase:Attack,  Keyphrase:Threat Intelligence,  Company:Mandiant Corp
• Malware:Smokedham Backdoor
• Researchers track down five affiliates of DarkSide ransomware service
• Published by ZDNet | security RSS (2021-05-12 20:00:00)
• Entities:
  • Keyphrase:Ransomware,  ThreatActor:DarkSide (hacker group),  Malware:DarkSide Ransomware,  Keyphrase:Ransomware-as-a-Service,  Company:Colonial Pipeline Company
• Malware:DarkSide Ransomware
• DarkSide ransomware model adds corporate veneer to cybercrime
• Published by Nikkei Asian Review (2021-05-12 10:08:00)
• Entities:
  • ThreatActor:DarkSide (hacker group),  Malware:DarkSide Ransomware,  Keyphrase:Cybercrime,  Keyphrase:Ransomware,  Keyphrase:Ransomware-as-a-Service
• Malware:Moriya Rootkit
• APT Group Using Backdoor for Espionage
• Published by InfoRiskToday.com (2021-05-13 04:23:15)
• Entities:
  • AttackType:Backdoor,  Keyphrase:Espionage,  Keyphrase:Operation TunnelSnake,  Company:Kaspersky Lab,  Malware:Moriya Rootkit
• Malware:Mailto Ransomware
• Cyberattacks on Canadian businesses up since remote work increased: report
• Published by Head Topics Canada (2021-05-12 15:37:00)
• Entities:
  • Keyphrase:Cyber Attack,  Keyphrase:Canadian,  Keyphrase:Remote Work,  Keyphrase:Vulnerability,  Company:Proofpoint Inc
• Malware:TeaBot
• TeaBot Android banking Trojan targets banks in Europe
• Published by Security Affairs (2021-05-12 21:54:13)
• Entities:
  • Malware:TeaBot,  AttackType:Banking Trojan,  Product:Google Android,  Company:Cleafy SpA,  Keyphrase:Bank