Silobreaker Update 2021年09月20日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
Taidoor		1	2	2
Pay or Grief		2	4	5
Bitter APT		2	6	7
Triton APT		1	1	3
Karma Panda		1	2	3

Name	Move	Volume 1d	Volume 7d	Volume 30d
PushDo		2	2	2
Derusbi Malware		2	2	2
Tinba Banking Trojan		2	2	2
KRIPTOVOR		2	2	2
Gauss Trojan		2	4	4

• ThreatActor:Taidoor
• Relationship between vulnerabilities used in targeted attacks and attacker groups – Japanese reporting – corelation between CVEs and various exploits – groups covered include Taidoor, BlackTech, Tonto Team and Tick
• Published by Reddit – BlueTeamSec – RSS (2021-09-19 16:46:25)
• Entities:
  • ThreatActor:Taidoor,  ThreatActor:Karma Panda,  Keyphrase:Tick,  Keyphrase:Attacker,  Keyphrase:Vulnerability
• ThreatActor:Pay or Grief
• 20th September – Threat Intelligence Report
• Published by Check Point Research – RSS (2021-09-20 00:08:36)
• Entities:
  • Keyphrase:Threat Intelligence,  Product:Check Point IPS,  Keyphrase:Intelligence Report,  Software:Linux OS,  AttackType:Remote Code Execution
• ThreatActor:Bitter APT
• Tech abused by Indian government to spy on Pakistan, China: Report
• Published by East Coast Daily English (2021-09-19 21:30:00)
• Entities:
  • Malware:Exodus Spyware,  GovernmentBody:Government of India,  Company:Kaspersky Lab,  Keyphrase:Vulnerability,  Country:India
• ThreatActor:Triton APT
• New bill urges critical infrastructure firms to adopt various measures, in response to mounting cybersecurity incidents
• Published by Industrial Cyber (2021-09-19 21:07:00)
• Entities:
  • Keyphrase:Cyber Security,  Organization:CISA US Cybersecurity & Infrastructure Security Agency,  Person:Joe Weiss,  Keyphrase:Critical Infrastructure,  Keyphrase:Cyber Incident
• ThreatActor:Karma Panda
• Relationship between vulnerabilities used in targeted attacks and attacker groups – Japanese reporting – corelation between CVEs and various exploits – groups covered include Taidoor, BlackTech, Tonto Team and Tick
• Published by Reddit – BlueTeamSec – RSS (2021-09-19 16:46:25)
• Entities:
  • ThreatActor:Taidoor,  ThreatActor:Karma Panda,  Keyphrase:Tick,  Keyphrase:Attacker,  Keyphrase:Vulnerability
• Malware:PushDo
• vxunderground – We’ve made a massive update to our novel malware sample collection:
  – Keybase
  – Sakula
  – Kriptovor
  – Angler EK
  – P… https://t.co/Oub6jY6IOn
• Published by vxunderground – Twitter (2021-09-20 01:54:54)
• Entities:
  • Malware:KRIPTOVOR,  UrlFull:https://cutt.ly/bEoHscE,  Malware:Tinba Banking Trojan,  Malware:Derusbi Malware,  Product:Angler Exploit Kit
• Malware:Derusbi Malware
• vxunderground – We’ve made a massive update to our novel malware sample collection:
  – Keybase
  – Sakula
  – Kriptovor
  – Angler EK
  – P… https://t.co/Oub6jY6IOn
• Published by vxunderground – Twitter (2021-09-20 01:54:54)
• Entities:
  • Malware:KRIPTOVOR,  UrlFull:https://cutt.ly/bEoHscE,  Malware:Tinba Banking Trojan,  Malware:Derusbi Malware,  Product:Angler Exploit Kit
• Malware:Tinba Banking Trojan
• vxunderground – We’ve made a massive update to our novel malware sample collection:
  – Keybase
  – Sakula
  – Kriptovor
  – Angler EK
  – P… https://t.co/Oub6jY6IOn
• Published by vxunderground – Twitter (2021-09-20 01:54:54)
• Entities:
  • Malware:KRIPTOVOR,  UrlFull:https://cutt.ly/bEoHscE,  Malware:Tinba Banking Trojan,  Malware:Derusbi Malware,  Product:Angler Exploit Kit
• Malware:KRIPTOVOR
• vxunderground – We’ve made a massive update to our novel malware sample collection:
  – Keybase
  – Sakula
  – Kriptovor
  – Angler EK
  – P… https://t.co/Oub6jY6IOn
• Published by vxunderground – Twitter (2021-09-20 01:54:54)
• Entities:
  • Malware:KRIPTOVOR,  UrlFull:https://cutt.ly/bEoHscE,  Malware:Tinba Banking Trojan,  Malware:Derusbi Malware,  Product:Angler Exploit Kit
• Malware:Gauss Trojan
• Securityblog – RT @vxunderground: We’ve made a massive update to our novel malware sample collection:
  Slave, Stegoloader, Emdivi, Neutrino EK, Cryptowall…
• Published by Securityblog – Twitter (2021-09-19 16:59:55)
• Entities:
  • Malware:JIANMO Malware,  UrlFull:https://cutt.ly/bEoHscE,  UrlFull:https://twitter.com/vxunderground/status/1439286555164782595/photo/1,  Malware:Stegoloader,  Malware:NitlovePOS