Silobreaker Update 2021年09月24日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
APT36		5	5	5
DRBControl		2	2	2
LuminousMoth		2	3	3
SparklingGoblin		8	9	31
TAG-28		5	21	21

Name	Move	Volume 1d	Volume 7d	Volume 30d
OpenSUpdater		4	4	4
Zloader Malware		6	13	27
Conti Ransomware		60	118	311
REvil Ransomware		34	203	623
BlackMatter Ransomware		17	146	226

• ThreatActor:APT36
• Cisco Talos warns of hacking campaign targeting India’s government, military staff
• Published by Economic Times (2021-09-24 00:30:00)
• Entities:
  • Company:Cisco Talos Security Intelligence & Research Group,  Malware:WARZONE RAT,  Country:India,  Keyphrase:Computer Hacking,  Keyphrase:Campaign
• ThreatActor:DRBControl
• Espionage group targeted hotels, governments, seized on Microsoft Exchange vulnerability
• Published by Cyberscoop – News (2021-09-23 18:30:29)
• Entities:
  • Software:Microsoft Exchange Server Enterprise,  Keyphrase:Espionage Group,  Company:ESET,  Keyphrase:Hotel,  Keyphrase:Vulnerability
• ThreatActor:LuminousMoth
• New advanced hacking group targets governments, engineers worldwide
• Published by ZDNet | security RSS (2021-09-23 19:23:00)
• Entities:
  • Keyphrase:APT Advanced Persistent Threat,  Keyphrase:Hacker Group,  Keyphrase:ProxyLogon,  Company:ESET,  Keyphrase:C2 Command & Control
• ThreatActor:SparklingGoblin
• New advanced hacking group targets governments, engineers worldwide
• Published by ZDNet | security RSS (2021-09-23 19:23:00)
• Entities:
  • Keyphrase:APT Advanced Persistent Threat,  Keyphrase:Hacker Group,  Keyphrase:ProxyLogon,  Company:ESET,  Keyphrase:C2 Command & Control
• ThreatActor:TAG-28
• Suspected Chinese Hacker Group Targets Media and Government in India, Report Says
• Published by Epoch Times (2021-09-23 20:38:00)
• Entities:
  • GovernmentBody:Unique Identification Authority of India,  Keyphrase:Hacker Group,  Keyphrase:Chinese,  Organization:Insikt Group,  ThreatActor:TAG-28
• Malware:OpenSUpdater
• Google finds adware strain abusing novel file signature evasion technique
• Published by Record by Recorded Future (2021-09-24 00:52:00)
• Entities:
  • Keyphrase:Adware,  Malware:OpenSUpdater,  Company:Google Inc,  Keyphrase:Digital Signature,  Incident:Evasion
• Malware:Zloader Malware
• nao_sec – RT @MsftSecIntel: While analyzing ZLoader campaigns in early September, we observed a notable shift in delivery method: from the traditiona…
• Published by nao_sec – Twitter (2021-09-24 02:02:03)
• Entities:
  • Username:@nao_sec,  Malware:Zloader Malware,  Username:@MsftSecIntel,  Keyphrase:Online Advertising,  Keyphrase:Campaign
• Malware:Conti Ransomware
• CISA releases advisory on Conti ransomware, notes increase in attacks after more than 400 incidents
• Published by ZDNet (2021-09-23 08:51:00)
• Entities:
  • Malware:Conti Ransomware,  Organization:CISA US Cybersecurity & Infrastructure Security Agency,  Keyphrase:Ransomware,  Incident:Attack,  GovernmentBody:FBI Federal Bureau of Investigation
• Malware:REvil Ransomware
• REvil redux: ransomware’s biggest menace is back Despite release of free ransomware decryption tool.
• Published by ACS News (2021-09-23 12:13:00)
• Entities:
  • Malware:REvil Ransomware,  Keyphrase:Ransomware,  Keyphrase:Decryption,  Company:Bitdefender,  Keyphrase:Release
• Malware:BlackMatter Ransomware
• Olympus Suffers a Suspected BlackMatter Ransomware Attack
• Published by CPO Magazine (2021-09-24 04:42:00)
• Entities:
  • Malware:BlackMatter Ransomware,  Keyphrase:Ransomware,  ThreatActor:DarkSide Hacking Group,  Keyphrase:Suffer,  Keyphrase:Ransomware-as-a-Service