Silobreaker Update 2021年10月29日

インターネット上でトレンドとなっている脅威アクター、マルウェアのランキングです。
Silobreaker の API を使用して作成しています。このページに関する説明はこちらをご覧ください。

Name	Move	Volume 1d	Volume 7d	Volume 30d
TA575		4	4	4
Cyber Berkut		1	1	1
Moses Staff APT		8	13	13
Desorden Group		16	19	45
TA2722		7	20	20

Name	Move	Volume 1d	Volume 7d	Volume 30d
MATA Malware		22	32	33
Jupyter Infostealer		12	14	19
Grief Ransomware		48	88	103
Ranzy Ransomware		18	37	38
LockFile Ransomware		10	15	37

• ThreatActor:TA575
• TA575 Uses ‘Squid Game’ Lures to Distribute Dridex malware
• Published by Proofpoint US Blog (2021-10-29 03:31:25)
• Entities:
  • ThreatActor:TA575,  Malware:Dridex Malware,  Product:Squid Game,  Software:Microsoft Excel,  Company:Proofpoint Inc
• ThreatActor:Cyber Berkut
• A Brief History of Online Influence Operations
• Published by Lawfare – Blog (2021-10-28 23:52:52)
• Entities:
  • Keyphrase:Disinformation,  Country:Russia,  Company:Twitter Inc,  Keyphrase:Research,  Company:Facebook Inc
• ThreatActor:Moses Staff APT
• Israel: Hacker group leaks information on Ministry of Defense
• Published by i24news (2021-10-28 14:26:00)
• Entities:
  • Keyphrase:Hacker Group,  Keyphrase:Ministry of Defence,  Person:Benny Gantz,  ThreatActor:Moses Staff APT,  Country:Israel
• ThreatActor:Desorden Group
• Acer Suffers Another Cyber Attack Within Weeks; Hackers Warned of More Vulnerable Servers
• Published by CPO Magazine (2021-10-29 07:42:00)
• Entities:
  • Company:Acer Inc,  Keyphrase:Cyber Attack,  Keyphrase:Hacker Group,  Keyphrase:Computer Hacker,  ThreatActor:Desorden Group
• ThreatActor:TA2722
• ZDNet – Meet Balikbayan Foxes: a threat group impersonating the Philippine gov’t https://t.co/eURup5q1Xk
• Published by ZDNet – Twitter (2021-10-29 00:15:15)
• Entities:
  • ThreatActor:TA2722,  Keyphrase:Hacker Group,  Keyphrase:Impersonator,  Username:@zdnet,  Country:Philippines
• Malware:MATA Malware
• North Korea’s Lazarus Group Targets IT Supply Chains with MATA Malware
• Published by CISO MAG – Cyber Security Magazine (2021-10-28 18:59:06)
• Entities:
  • ThreatActor:Lazarus Group,  Malware:MATA Malware,  AttackType:Supply Chain Attack,  Keyphrase:Supply Chain,  Keyphrase:Malware
• Malware:Jupyter Infostealer
• SEO Poisoning Used to Distribute Ransomware
• Published by Dark Reading (2021-10-29 06:11:00)
• Entities:
  • AttackType:Search Engine Poisoning,  Company:Menlo Security,  Malware:Jupyter Infostealer,  Keyphrase:Campaign,  Software:Formidable Forms
• Malware:Grief Ransomware
• issala – Ransomware group claims it hit National Rifle Association. A hacker group known as Grief said it stole information… https://t.co/PHNhMqxWCA
• Published by issala – Twitter (2021-10-29 00:51:58)
• Entities:
  • Malware:Grief Ransomware,  Username:@issala,  Organization:NRA National Rifle Association,  Keyphrase:Hacker Group,  Keyphrase:Cyber Attack
• Malware:Ranzy Ransomware
• FBI warns of Ranzy Locker ransomware threat, as over 30 companies hit
• Published by Graham Cluley (2021-10-29 00:13:32)
• Entities:
  • Malware:Ranzy Ransomware,  GovernmentBody:FBI Federal Bureau of Investigation,  Keyphrase:Threat,  Keyphrase:Ransomware-as-a-Service,  Keyphrase:Data Protection
• Malware:LockFile Ransomware
• RecordedFuture – RT @TheRecord_Media: A cybersecurity firm has released free decryption utilities to recover files that have been encrypted by three ransomw…
• Published by RecordedFuture – Twitter (2021-10-29 04:42:03)
• Entities:
  • Malware:AtomSilo Ransomware,  Malware:LockFile Ransomware,  Username:@TheRecord_Media,  Username:@recordedfuture,  Malware:Babuk Locker