위협 인텔리전스 (3,953건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 54분 전.
CISA KEV
1,760
실제 공격 중
1,943
랜섬웨어
361
익스플로잇 공개
3,499
악용확률 50%↑
906
제로데이
14
🦠 최근 랜섬웨어 공격 동향 (ransomware.live · 52분 전 갱신)
- Centre des Sciences de la Santé de l'Université du Nouveau-Mexique (UNM HSC) (US)
- Oneonta City School District (US)
- Cutlers Hill Surgery (GB)
- Quest Diagnostics (US)
- Shinryo Reinetsu Kogyo Co., Ltd. (JP)
- Sunin Motors (KO)
- qilin COMAPA Victoria (ME)
- Richmond Public Schools (US)
- Ville de Columbia (US)
- Borough de Petersburg (US)
- Parkview Health (US)
- Graines de Culture(s) / Communauté de communes Pévèle Carembault (FR)
- TAKKT AG (DE)
- Administration du district d'Oberspreewald-Lausitz (GE)
- Meishi Daren Co., Ltd. (TW)
- Localmind (AU)
ransomware.live 는 무료 API로 CVE 연결까지는 제공하지 않아, 이 목록은 아래 CVE 표와는 별개(피해 신고 기준)입니다.
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2021-41773 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Apache HTTP Server 🦠 CVE-2021-41773 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2020-3452 | 7.5 T7.0 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) |
| 100 | CVE-2024-27199 | 7.3 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | JetBrains TeamCity 🦠 BianLian (Ransomware); Jasmin (Ransomware); Unattributed (Ransomware); LockBit (Ransomware) |
| 100 | CVE-2023-29300 | 9.8 T9.1 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Adobe ColdFusion 🦠 Unattributed (Ransomware) |
| 100 | CVE-2018-7600 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Drupal Drupal Core 🦠 CVE-2018-7600 (Exploit); Lucifer (Ransomware); Petya (Ransomware); Muhstik (Ransomware); QNAPCrypt (Ransomwar… |
| 100 | CVE-2021-34523 | 9.0 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2021-33044 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Dahua IP Camera Firmware |
| 100 | CVE-2020-9054 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Zyxel Multiple Network-Attached Storage (NAS) Devices |
| 100 | CVE-2024-4577 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | PHP Group PHP 🦠 CVE-2024-4577 (Exploit); Heuristic (Malware); TellYouThePass (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-42793 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | JetBrains TeamCity 🦠 BianLian (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-46805 | 8.2 T7.6 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Connect Secure and Policy Secure 🦠 Unattributed (Ransomware); DragonForce (Ransomware) |
| 100 | CVE-2019-9670 | 9.8 T8.8 | 100.0% | KEVPoC EPSS 100%원격 | Synacor Zimbra Collaboration Suite (ZCS) |
| 100 | CVE-2023-29357 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Microsoft SharePoint Server 🦠 CVE-2023-29357 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2023-22527 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Data Center and Server 🦠 Unattributed (Ransomware); LockBit (Ransomware) |
| 100 | CVE-2022-40684 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortinet Multiple Products 🦠 Akira (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-20090 | 9.8 T8.8 | 100.0% | KEV익스공개 EPSS 100%원격 | Arcadyan Buffalo Firmware |
| 100 | CVE-2025-22457 | 9.0 T9.6 | 100.0% | KEV랜섬실공격제로데이PoC기능적 EPSS 100%원격 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways 🦠 Unattributed (Ransomware) |
| 100 | CVE-2025-0282 | 9.0 | 100.0% | KEV랜섬PoC EPSS 100% | Ivanti Connect Secure, Policy Secure, and ZTA Gateways |
| 100 | CVE-2021-22204 | 6.8 T7.2 | 100.0% | KEV실공격PoC기능적 EPSS 100% | Perl Exiftool 🦠 Generic (Malware); Generic (Backdoor); Multiverze (Trojan); CVE-2021-22204 (Exploit); CVE-2021-22205 (Exploit… |
| 100 | CVE-2025-59287 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100% | Microsoft Windows 🦠 Unattributed (Ransomware) |
| 100 | CVE-2024-1709 | 10.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | ConnectWise ScreenConnect 🦠 Bl00dy Ransomware Gang (Ransomware); Black Basta (Ransomware); Cicada3301 (Ransomware); LockBit (Ransomware);… |
| 100 | CVE-2023-4863 | 8.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100% | Google Chromium WebP 🦠 CVE-2023-4863 (Exploit); Coper (Trojan); CVE-2023-4762 (Exploit) |
| 100 | CVE-2024-24919 | 8.6 T8.0 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Check Point Quantum Security Gateways 🦠 NailaoLocker (Ransomware); Unattributed (Ransomware); Black Basta (Ransomware); Akira (Ransomware); Royal Ran… |
| 100 | CVE-2021-45046 | 9.0 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Apache Log4j2 🦠 Malclass (Trojan); Generic (Trojan); AdWind (Trojan); Disco (Infostealer); NightSky (Ransomware); TellYouTheP… |
| 100 | CVE-2019-2725 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Oracle WebLogic Server 🦠 Generic (Trojan); Cerber (Ransomware); Conti (Ransomware); GandCrab (Ransomware); Muhstik (Ransomware); QNAPC… |
| 100 | CVE-2012-0158 | 8.8 T8.2 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Microsoft MSCOMCTL.OCX 🦠 TROJ_MDROP.GDL (Trojan); TROJ_ARTIEF.FT (Trojan); TROJ_ARTIEF.VDY (Trojan); TROJ_ARTIEF.PI (Trojan); TROJ_ART… |
| 100 | CVE-2025-5777 | 7.5 T7.0 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Citrix NetScaler ADC and Gateway 🦠 Unattributed (Ransomware); Anubis (Ransomware); Ransomware Inc (Ransomware); DragonForce (Ransomware) |
| 100 | CVE-2014-8361 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Realtek SDK 🦠 Mirai (Trojan); Multiverze (Trojan); ZHTrap (Trojan); CVE-2017-17215 (Exploit); CVE-2014-8361 (Exploit); Mira… |
| 100 | CVE-2022-41082 | 8.0 T8.2 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Microsoft Exchange Server 🦠 Play (Ransomware); Cuba (Ransomware); Lockbit (Ransomware); Hive (Ransomware); Unattributed (Ransomware); Hel… |
| 100 | CVE-2020-25506 | 9.8 T9.3 | 100.0% | KEV익스공개 EPSS 100%원격 | D-Link DNS-320 Device |
| 100 | CVE-2017-12617 | 8.1 T7.5 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Apache Tomcat 🦠 CVE-2017-12615 (Exploit); CVE-2017-12617 (Exploit); Lucky (Ransomware); Satan (Ransomware); Unattributed (Ran… |
| 100 | CVE-2025-31161 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | CrushFTP CrushFTP 🦠 Unattributed (Ransomware) |
| 100 | CVE-2022-47986 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | IBM Aspera Faspex 🦠 CVE-2022-47986 (Exploit); IceFire (Ransomware); Buhti (Ransomware); Unattributed (Ransomware); buhtiRansom (R… |
| 100 | CVE-2021-42013 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Apache HTTP Server 🦠 Unattributed (Ransomware) |
| 100 | CVE-2021-3156 | 7.8 T9.3 | 100.0% | KEV실공격PoC기능적 EPSS 100% | Sudo Sudo 🦠 Babuk (Ransomware); CryptoMix (Ransomware); Epsilon Red (Ransomware); Conti (Ransomware); DarkSide (Ransomwar… |
| 100 | CVE-2020-0688 | 8.8 T8.2 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Microsoft Exchange Server 🦠 Bulz (Trojan); Bulz (Exploit); CVE-2020-0688 (Exploit); Thanos (Ransomware); Conti (Ransomware); Hakbit (Rans… |
| 100 | CVE-2019-10149 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Exim Mail Transfer Agent (MTA) |
| 100 | CVE-2022-41040 | 8.8 T8.2 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Microsoft Exchange Server 🦠 Play (Ransomware); Cuba (Ransomware); Lockbit (Ransomware); Hive (Ransomware); Unattributed (Ransomware); Hel… |
| 100 | CVE-2022-1388 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | F5 BIG-IP 🦠 CVE-2022-1388 (Exploit); Unattributed (Ransomware); Black Basta (Ransomware) |
| 100 | CVE-2023-38035 | 9.8 | 100.0% | KEV랜섬PoC EPSS 100% | Ivanti Sentry |
| 100 | CVE-2018-15961 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Adobe ColdFusion |
| 100 | CVE-2018-10562 | 9.8 T9.6 | 100.0% | KEV랜섬실공격제로데이PoC기능적 EPSS 100%원격 | Dasan Gigabit Passive Optical Network (GPON) Routers 🦠 PNScan (Trojan); Botenago (Trojan); CVE-2018-10561 (Exploit); CVE-2018-10562 (Exploit); Muhstik (Ransomware);… |
| 100 | CVE-2017-11882 | 7.8 T8.4 | 100.0% | KEV랜섬실공격PoC광범위 EPSS 100% | Microsoft Office 🦠 Heuristic (Downloader); Heuristic (Trojan); Heuristic (Hacktool); Heuristic (Dropper); Boxter (Trojan); Dapat… |
| 100 | CVE-2022-30525 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Zyxel Multiple Firewalls 🦠 Black Basta (Ransomware) |
| 100 | CVE-2021-3129 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Laravel Ignition 🦠 Unattributed (Ransomware) |
| 100 | CVE-2020-10189 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Zoho ManageEngine |
| 100 | CVE-2014-7169 | 9.8 T8.8 | 100.0% | KEV실공격제로데이PoC광범위 EPSS 100%원격 | GNU Bourne-Again Shell (Bash) 🦠 SHELLSHOCK (Backdoor); PERL_SHELBOT.SMA (Backdoor); PERL_SHELLBOT.SM (Backdoor); ELF_BASHLITE.SMB (Backdoor);… |
| 100 | CVE-2024-27198 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | JetBrains TeamCity 🦠 BianLian (Ransomware); Jasmin (Ransomware); Unattributed (Ransomware); LockBit (Ransomware) |
| 100 | CVE-2022-22963 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | VMware Tanzu Spring Cloud 🦠 CVE-2022-22963 (Exploit); SpringShell (Exploit) |
| 100 | CVE-2023-34362 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Progress MOVEit Transfer 🦠 Clop (Ransomware); Unattributed (Ransomware) |