Silobreaker Update 2021年06月17日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
Domestic Kitten		3	3	3
FIN11		8	8	10
Volodya		5	6	8
TA505		5	8	16
UNC2465		4	4	9

Name	Move	Volume 1d	Volume 7d	Volume 30d
FlawedAmmyy RAT		4	4	4
CryptoMix Wallet Ransomware		4	4	4
Clop Ransomware		96	101	117
Paradise Ransomware		11	15	15
Jupyter Infostealer		27	46	50

• ThreatActor:Domestic Kitten
• Ferocious Kitten: 6 years of covert surveillance in Iran
• Published by Kaspersky Lab (2021-06-16 19:00:07)
• Entities:
  • Keyphrase:Malware,  Keyphrase:C2 Command & Control,  Company:IT Group Inc,  Keyphrase:Payload,  Software:Telegram App
• ThreatActor:FIN11
• BUSTED: Ukraine Ransomware Gang Known for Hacking Universities Arrested
• Published by Tech Times (2021-06-17 05:34:00)
• Entities:
  • Malware:Clop Ransomware,  Keyphrase:Ransomware,  Keyphrase:Imprisonment and Detention,  Country:Ukraine,  Keyphrase:Operation
• ThreatActor:Volodya
• Trial of another group of Armenians accused of terrorism begins
• Published by Turan Azerbaijan (2021-06-16 21:02:00)
• Entities:
  • Incident:Terrorism,  Country:Azerbaijan,  Organization:State Security Service of Azerbaijan,  ThreatActor:Volodya,  City:Hadrut (Azerbaijan)
• ThreatActor:TA505
• The evolving ransomware threat
• Published by TechRadar.com (2021-06-16 23:22:00)
• Entities:
  • Keyphrase:Ransomware,  Keyphrase:Threat,  Incident:Extortion,  Keyphrase:Vulnerability,  Keyphrase:Threat Intelligence
• ThreatActor:UNC2465
• Hackers linked to Colonial Pipeline assault reemerge with new tactics
• Published by Washington Times (2021-06-16 23:38:00)
• Entities:
  • ThreatActor:DarkSide,  Company:FireEye Inc,  Company:Colonial Pipeline Company,  ThreatActor:UNC2465,  Keyphrase:Computer Hacker
• Malware:FlawedAmmyy RAT
• Cl0p affiliated hackers exposed in Ukraine, $500 million in damages estimated
• Published by DataBreaches.net (2021-06-16 20:54:49)
• Entities:
  • Malware:Clop Ransomware,  Keyphrase:Hacker,  Keyphrase:Exposure,  Country:Ukraine,  Keyphrase:Police
• Malware:CryptoMix Wallet Ransomware
• VK_Intel – 🔥#Clop Ransomware (CryptoMix) Linked Operation Takedown:
  From unknown ransomware, only @malwrhunterteam and I trac… https://t.co/JAR6SwuNWA
• Published by VK_Intel – Twitter (2021-06-17 06:59:47)
• Entities:
  • UrlFull:https://github.com/k-vitali/cryptomix-clop-ransomware,  UrlFull:https://www.youtube.com/watch?v=PqGaZgepNTE,  Malware:CryptoMix Wallet Ransomware,  HashTag:#Clop,  Keyphrase:Ransomware
• Malware:Clop Ransomware
• Law enforcement raids ransomware group that counted US universities among its targets
• Published by SC Magazine US (2021-06-17 00:44:00)
• Entities:
  • Malware:Clop Ransomware,  Keyphrase:Ransomware,  Keyphrase:Law Enforcement,  ThreatActor:FIN11,  Malware:Egregor Ransomware
• Malware:Paradise Ransomware
• Paradise Ransomware’s Source Code Now Available on a Hacker Forum
• Published by Cyware (2021-06-17 05:28:00)
• Entities:
  • Malware:Paradise Ransomware,  Keyphrase:Source Code,  Keyphrase:Ransomware,  Keyphrase:Encryption,  Keyphrase:Ransomware-as-a-Service
• Malware:Jupyter Infostealer
• SolarMarker – The RAT with a Poisonous Trail
• Published by Cyware (2021-06-16 23:29:00)
• Entities:
  • Malware:Jupyter Infostealer,  Keyphrase:RAT Remote Access Trojan,  Incident:Attack,  Keyphrase:Poisonous,  Keyphrase:PDF Portable Document Format