Security News

위협 조직 정보

국가배후(APT) 조직은 MITRE ATT&CK 공개 데이터, 랜섬웨어/갈취 조직은 ransomware.live 공개 데이터 기반입니다.

국가배후(APT) 조직 (MITRE ATT&CK 178개 보유 · 5일 전 갱신 · 우리 뉴스에 언급된 조직만 기본 표시)

APT28 (G0007) 뉴스 12건

별칭: IRON TWILIGHT, SNAKEMACKEREL, Swallowtail, Group 74, Sednit, Sofacy, Pawn Storm, Fancy Bear, STRONTIUM, Tsar Team, Threat Group-4127, TG-4127

APT28 is a threat group that has been attributed to Russia's General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS) military unit 26165. This group has been active since at least 2004. APT28 reportedly compromised the Hillary Clinton campaign, the Democratic National Committee, and the Democratic Congressional Campaign Committee in 2016 in an attempt to interfere with the U.S. presidential election. In 2018, the US indicted five GRU Unit 26165 officers associa

관련 CVE: CVE-2026-21509 CVE-2026-0251 CVE-2026-15920 CVE-2026-18885 CVE-2026-19874 CVE-2020-35730

Additional Email Delegate PermissionsApplication Access TokenArchive Collected DataArchive via UtilityArtificial IntelligenceAutomated CollectionBidirectional CommunicationBootkitBrute ForceClear Windows Event Logs

MITRE ATT&CK 프로필 ↗

APT29 (G0016) 뉴스 14건

별칭: IRON RITUAL, IRON HEMLOCK, NobleBaron, Dark Halo, NOBELIUM, UNC2452, YTTRIUM, The Dukes, Cozy Bear, CozyDuke, SolarStorm, Blue Kitsune

APT29 is threat group that has been attributed to Russia's Foreign Intelligence Service (SVR). They have operated since at least 2008, often targeting government networks in Europe and NATO member countries, research institutes, and think tanks. APT29 reportedly compromised the Democratic National Committee starting in the summer of 2015. In April 2021, the US and UK governments attributed the SolarWinds Compromise to the SVR; public statements included citations to APT29, Cozy Bear, and The Duk

관련 CVE: CVE-2026-61587 CVE-2026-6485 CVE-2026-70648 CVE-2026-81578 CVE-2026-82533 CVE-2026-84390

Accessibility FeaturesAdditional Email Delegate PermissionsBinary PaddingBoot or Logon Initialization ScriptsBypass User Account ControlCloud APICloud AccountCloud AccountsCloud Administration CommandCloud Services

MITRE ATT&CK 프로필 ↗

Kimsuky (G0094) 뉴스 34건

별칭: Black Banshee, Velvet Chollima, Emerald Sleet, THALLIUM, APT43, TA427, Springtail, Earth Kumiho, PatheticSlug

Kimsuky is a Democratic People's Republic of Korea (DPRK)-based cyber espionage group that has been active since at least 2012. The group initially targeted South Korean government agencies, think tanks, and subject-matter experts in various fields. Its operations expanded to include the United Nations and organizations in the government, education, business services, and manufacturing sectors across the United States, Japan, Russia, and Europe. Kimsuky has focused collection on foreign policy a

관련 CVE: CVE-2024-1709 CVE-2026-3564 CVE-2026-68820 CVE-2026-18312 CVE-2026-42608 CVE-2026-75684

Acquire InfrastructureAdditional Local or Domain GroupsAdversary-in-the-MiddleArchive via Custom MethodArchive via UtilityAutomated ExfiltrationBidirectional CommunicationBinary PaddingBrowser ExtensionsBrowser Information Discovery

MITRE ATT&CK 프로필 ↗

Lazarus Group (G0032) 뉴스 44건

별칭: Labyrinth Chollima, HIDDEN COBRA, Guardians of Peace, ZINC, NICKEL ACADEMY, Diamond Sleet

Lazarus Group is a North Korean state-sponsored cyber threat group attributed to the Reconnaissance General Bureau (RGB). Lazarus Group has been active since at least 2009 and is reportedly responsible for the November 2014 destructive wiper attack on Sony Pictures Entertainment, identified by Novetta as part of Operation Blockbuster. Malware used by Lazarus Group correlates to other reported campaigns, including Operation Flame, Operation 1Mission, Operation Troy, DarkSeoul, and Ten Days of Rai

관련 CVE: CVE-2026-68820 CVE-2026-109618 CVE-2026-109619 CVE-2021-21551 CVE-2026-63688 CVE-2026-115560

Account ManipulationApplication Window DiscoveryArchive Collected DataArchive via Custom MethodArchive via LibraryBidirectional CommunicationBootkitClear Command HistoryCode SigningCreate Process with Token

MITRE ATT&CK 프로필 ↗

Scattered Spider (G1015) 뉴스 9건

별칭: Roasted 0ktapus, Octo Tempest, Storm-0875, UNC3944

Scattered Spider is a native English-speaking cybercriminal group active since at least 2022. The group initially targeted customer relationship management (CRM) providers, business process outsourcing (BPO) firms, and telecommunications and technology companies before expanding in 2023 to gaming, hospitality, retail, managed service provider (MSP), manufacturing, and financial sectors. Scattered Spider relies heavily on social engineering, including impersonating IT and help-desk staff, to gain

관련 CVE: CVE-2026-77179 CVE-2026-81995 CVE-2026-82988 CVE-2026-86510 CVE-2026-86555 CVE-2026-87902

Account DiscoveryAccount ManipulationAdditional Cloud RolesBrowser Information DiscoveryClear Mailbox DataCloud AccountsCloud Infrastructure DiscoveryCloud Service DashboardCloud ServicesCode Repositories

MITRE ATT&CK 프로필 ↗

Volt Typhoon (G1017) 뉴스 4건

별칭: BRONZE SILHOUETTE, Vanguard Panda, DEV-0391, UNC3236, Voltzite, Insidious Taurus, DazedToad

Volt Typhoon is a People's Republic of China (PRC) state-sponsored actor that has been active since at least 2021, primarily targeting critical infrastructure organizations in the US and its territories including Guam. Volt Typhoon's targeting and pattern of behavior have been assessed as pre-positioning to enable lateral movement to operational technology (OT) assets for potential destructive or disruptive attacks. Volt Typhoon has emphasized stealth in operations using web shells, living-off-t

관련 CVE: CVE-2025-8876 CVE-2025-30238 CVE-2026-88772 CVE-2026-16812 CVE-2025-30239 CVE-2024-39717

Application Window DiscoveryArchive via UtilityBotnetBrowser Information DiscoveryClear Network Connection History and ConfigurationsClear Windows Event LogsCredentials from Password StoresCredentials from Web BrowsersData StagedData from Local System

MITRE ATT&CK 프로필 ↗

랜섬웨어 · 갈취 조직 (412개 · 1시간 전 갱신)

Mimori

조직 자체 설명은 아직 없음 — 최근 피해 사례: OpenText (CA) · Technology · 2026-10-20
OpenText Corporation is a Canadian company that develops and sells enterprise information management software. OpenText can help you tackle the most complex digital transformation programs with confid

유출사이트 1곳 등재 2026-10-20

Whitearmor

조직 자체 설명은 아직 없음 — 최근 피해 사례: Echo.com (DE) · Technology · 2026-10-28
Echo Global Logistics is a Chicago-based, technology-enabled third-party logistics provider offering freight brokerage and integrated supply chain services, including truckload, LTL, warehousing, and

유출사이트 1곳 등재 2026-10-20

THE SEVEN DEADLY SINS (7DS)

조직 자체 설명은 아직 없음 — 최근 피해 사례: Cradlewise Inc. (US) · Technology · 2026-10-16
VC-backed smart crib manufacturer; ~$14M/yr DTC revenue plus Nurture subscription layer.

유출사이트 1곳 등재 2026-10-16

0x00

조직 자체 설명은 아직 없음 — 최근 피해 사례: bienestarempresarial (MX) · Professional Services · 2026-10-15
bienestarempresarial.mx

유출사이트 1곳 등재 2026-10-15

HYFLOCK

조직 자체 설명은 아직 없음 — 최근 피해 사례: Aesthetic Dental Designs, P.A (US) · Healthcare · 2026-10-25
Aesthetic Dental Designs, P.A. (operating commercially as Dental Arts of Atlantis) is a fully licensed and accredited dental healthcare corporation headquartered at 5057 S Congress Ave, Suite 401, Lak

유출사이트 1곳 등재 2026-10-13

Scarlettgroup

Leaks are uploaded to QU.AX service

유출사이트 3곳 등재 2026-10-08

UmBra

조직 자체 설명은 아직 없음 — 최근 피해 사례: Helwan University (HITU) (EG) · Education · 2026-10-10
Helwan International Technological University — a pioneering Egyptian institution offering cutting-edge programs in Cybersecurity, Data Science, Artificial Intelligence, and Mechatronics, equipped wit

유출사이트 1곳 등재 2026-10-06

BYOD

조직 자체 설명은 아직 없음 — 최근 피해 사례: UPDATE: UNM · Education · 2026-10-27
We are offering the decryption key for the remaining of locked devices for free (ONLY for the hospital sector) we did not know that it was running machines related to assisting patients in real-time,

유출사이트 1곳 등재 2026-10-05

VYPR

조직 자체 설명은 아직 없음 — 최근 피해 사례: Medical Data Rx (US) · Healthcare · 2026-09-05
Technical Solutions Group, located in the heart of Mid-Michigan, is dedicated to assisting small businesses with their technology, advertising, and networking requirements. Their mission is to equip o

유출사이트 1곳 등재 2026-10-05

Владивосток

설명·피해 사례 정보 없음

유출사이트 1곳 등재 2026-09-28

ImNotAVillain

조직 자체 설명은 아직 없음 — 최근 피해 사례: Italy (IT) · Government & Defense · 2026-09-24
Italy is being exposed for failing to follow proper data protection laws. Includes 85,000+ Files — 150GB. Top departments, units, offices affected.

유출사이트 1곳 등재 2026-09-24

EndZone

조직 자체 설명은 아직 없음 — 최근 피해 사례: Philander Smith University (US) · Education · 2026-10-06
Revenue: $25.3 million annual Philander Smith University is a private, historically Black liberal arts institution in Little Rock, Arkansas, founded in 1877 and affiliated with the United Methodist C

유출사이트 1곳 등재 2026-09-18

N0n

조직 자체 설명은 아직 없음 — 최근 피해 사례: Company #112 (MY) · Not Found · 2026-10-28
telecommunications services · Malaysia | [PENDING EXPOSURE: · settlement window open]

유출사이트 1곳 등재 2026-09-18
CollectionDefense ImpairmentExecutionImpactInitial AccessLateral MovementPersistenceStealth

Spirals

조직 자체 설명은 아직 없음 — 최근 피해 사례: seven seas group (AE) · Transportation · 2026-10-03
Seven Seas is a global maritime services group that specializes in providing general ship supplies, stores, spare parts & leading technical maritime brands through its extensive global network.

유출사이트 1곳 등재 2026-09-18

Galago

Panzer RaaS partners

유출사이트 1곳 등재 2026-09-15

BlackLocks

조직 자체 설명은 아직 없음 — 최근 피해 사례: ARCA UNLIMITED Architects (ZA) · Professional Services · 2026-09-22
Views: 49

유출사이트 2곳 등재 2026-09-04

Vexy Ransomware (vexy)

조직 자체 설명은 아직 없음 — 최근 피해 사례: polisee Inc (US) · Technology · 2026-10-16
polisee Inc. is a Japanese technology company that develops and operates an AI-powered policy intelligence platform. Its software automates the monitoring, collection, analysis, and sharing of governm

유출사이트 1곳 등재 2026-09-03

ZaWoo

조직 자체 설명은 아직 없음 — 최근 피해 사례: agiliance.fr (FR) · Professional Services · 2026-08-18
Agiliance is a French accounting and business advisory group headquartered across the Haute-Saône and Doubs regions. Its website describes Agiliance as the result of bringing together 8 small-to-mediu

유출사이트 1곳 등재 2026-08-30

Falcon

조직 자체 설명은 아직 없음 — 최근 피해 사례: Beasley Allen Law Firm (US) · Professional Services · 2026-10-26
Plaintiff litigation law firm - Our 214 GB extraction includes executed agreements, final settlement participation agreements, court-signed stipulations regarding net worth, privileged internal memos,

유출사이트 1곳 등재 2026-08-28

Meowciety403

설명·피해 사례 정보 없음

유출사이트 1곳 등재 2026-08-27

Cyberleek (Leek Road)

Leak of GTA VI

유출사이트 1곳 등재 2026-08-24

DYSPHOR1A

Suspicious group. We did not manage to confirm any victims.

유출사이트 3곳 등재 2026-08-20

iah6477 (Cinder)

조직 자체 설명은 아직 없음 — 최근 피해 사례: mckenneys (US) · Professional Services · 2026-10-18
Size: 295.9 GiB

유출사이트 1곳 등재 2026-08-20

xpl0itrs

조직 자체 설명은 아직 없음 — 최근 피해 사례: Target (US) · Retail & E-Commerce · 2026-08-20
General merchandise retail

유출사이트 1곳 등재 2026-08-15

BlueWhale

조직 자체 설명은 아직 없음 — 최근 피해 사례: Satellite Developer Server · Technology · 2026-08-10
A software developer at a company

유출사이트 1곳 등재 2026-08-14

Montage

설명·피해 사례 정보 없음

유출사이트 1곳 등재 2026-08-13

Emperador

조직 자체 설명은 아직 없음 — 최근 피해 사례: TWICE SRL · Not Found · 2026-10-27
Сompany from the Republic of San Marino, associated with the production and sale of fashion clothing and accessories. Archived personal and corporate data of employees and customers. [Sector: Manufact

유출사이트 1곳 등재 2026-08-12

Ethics

조직 자체 설명은 아직 없음 — 최근 피해 사례: Holstrom, Block & Parke, A Professional Law (US) · Professional Services · 2025-09-11
Our attorneys have experience handling cases in all areas of family law, estate planning, appeals, and probate law

유출사이트 2곳 등재 2026-08-12

Majinahanashi (Majin)

조직 자체 설명은 아직 없음 — 최근 피해 사례: Bi-silque (US) · Manufacturing · 2026-10-19
A Portuguese manufacturing company that produces equipment for offices, schools, and presentations. Its product line includes whiteboards, corkboards, flip charts, information displays, glass board...

유출사이트 7곳 등재 2026-08-12

Eclipse 최근 활동

조직 자체 설명은 아직 없음 — 최근 피해 사례: PART2 Global AirFreight International (SG) · Transportation · 2026-10-17
PART 2 Global Airfreight International is a logistics solution provider specializing in air freight, ocean freight, cross-border trucking, and contract logistics. They cater to various industries incl

유출사이트 2곳 등재 2026-08-11

Sovcali

조직 자체 설명은 아직 없음 — 최근 피해 사례: Lucidmotors (US) · Transportation · 2026-08-04
Lucid Motors & eShocan Engineering Archive in Our Possession. The complete engineering archive of Lucid Motors and eShocan is now available: 5.078 terabytes of CATIA and STEP models, FEA and NVH analy

유출사이트 1곳 등재 2026-08-09

Helix (UNC7761)

조직 자체 설명은 아직 없음 — 최근 피해 사례: Westrock Coffee (US) · Retail & E-Commerce · 2026-10-21
Westrock Coffee records. Yearly revenue ~$1.2 billion yearly. GoFile links and passwords unlock in 24 hours.

유출사이트 3곳 등재 2026-08-07

L Group

조직 자체 설명은 아직 없음 — 최근 피해 사례: compendiumusa.net (US) · Professional Services · 2026-08-22
[AI generated] N/A

유출사이트 2곳 등재 2026-08-07

Storm

조직 자체 설명은 아직 없음 — 최근 피해 사례: Baltimore Tank Lines (US) · Transportation · 2026-10-19
Baltimore Tank Lines is a leading transporter of liquid bulk commodities, including fuel, DEF, motor oils, fertilizer, and food-grade products. With over 75 years of experience, the company serves a d

유출사이트 1곳 등재 2026-08-07

Barracuda

조직 자체 설명은 아직 없음 — 최근 피해 사례: Femern Link Contractors (DK) · Transportation · 2026-10-12
Femern Link Contractors (FLC) is an international joint venture responsible for designing and building the Fehmarnbelt tunnel between Denmark and Germany. Its work includes the immersed tunnel, tunnel

유출사이트 1곳 등재 2026-08-06

Dark Project

Dark Project is a newly emerged ransomware leak operation active as of August 2026. The group utilizes a double extortion model (stealing sensitive data before encrypting local systems and threatening to leak it on their dark web portal).

유출사이트 1곳 등재 2026-08-05

Panzer

조직 자체 설명은 아직 없음 — 최근 피해 사례: Yodingenierie (BJ) · Professional Services · 2026-10-25
YOD Engineering is an engineering company computer science, member of the NED&CO Group , a pan-African player committed to transformation digital, information systems governance and innovation by inte

유출사이트 32곳 등재 2026-08-05

Bolt Team (Bolt)

설명·피해 사례 정보 없음

유출사이트 1곳 등재 2026-08-01

Gammax

조직 자체 설명은 아직 없음 — 최근 피해 사례: Crowder Industries, Inc (US) · Manufacturing · 2026-09-29
Crowder Industries, Inc was established in 1969. Its mission is to provide meaningful and dignified work for disabled members of the community. It has...

유출사이트 1곳 등재 2026-07-30

Shiba

설명·피해 사례 정보 없음

유출사이트 1곳 등재 2026-07-27