Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
61 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
intelligence_src_58179cc3a307a2fc7fRecent successful batchLast successful batch: Last attempt:
intelligence_src_58f714eec78101e042Recent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
Recently, the AhnLab SEcurity intelligence Center (ASEC) identified instances of phishing emails being circulated that disguise themselves as requests to review a business proposal. The email body asks recipients to review the attached product list and reply with their feedback on inventory and pricing, thereby prompting users to download and open the attached ZIP file. […]
First reported Oct 13, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
ASEC Blog publishes Ransom & Dark Web Issues Week 3, September 2026           Internal Data of a Japanese Pharmaceutical and Healthcare Company Offered for Sale Following a Cyber Incident Customer Data of a South Korean E-Commerce and Retail Company Offered for Sale AUDIT TEAM Ransomware Attacks on Two South Korean Organizations
First reported Sep 16, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Just because it’s a familiar tactic doesn’t mean you can let your guard down. A similar attack method using cryptocurrency rewards as bait has recently been identified again. This time, a case was confirmed in which the Node.Js-based malware JSCEAL was distributed through Facebook ads impersonating a cryptocurrency exchange. The threat actors lured users to […]
First reported Sep 29, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Contents The AhnLab SEcurity intelligence Center (ASEC) collected attack logs targeting poorly managed Linux SSH servers through honeypots. This report compiles statistics by categorizing the attack sources identified in the third quarter of 2026, the attacks carried out from those sources, and the malware used. The report also provides a classification of the malware used […]
First reported Oct 07, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
1. Overview  AhnLab SEcurity intelligence Center (ASEC) recently identified a case in which the Kimsuky group ultimately distributed the Funhouse ransomware via a malicious Hangul document that was disguised as a resume. The Funhouse ransomware was identified as a variant of previously disclosed endpoint ransomware, and the tools used in this attack—such as Quasar RAT—as […]
First reported Sep 30, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Summary of Vulnerability Trends for the Third Quarter of 2026 A total of 36,971 CVEs were disclosed in the third quarter of 2026, representing an increase of approximately 78.6% Compared to the second quarter. Among the vulnerabilities for which CVSS assessments were completed, approximately 12.7% Were rated “Critical” and approximately 42.6% Were rated “High,” meaning […]
First reported Oct 06, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Purpose and Scope This report summarizes statistics on new ransomware samples, affected systems, and statistics on targeted businesses collected during the month of August 2026, as well as major Korean & Global ransomware issues. Statistics on targeted businesses were compiled based on the time when publicly available information from ransomware groups’ DLS (Dedicated Leak Sites, […]
First reported Sep 22, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Recently, the AhnLab SEcurity intelligence Center (ASEC) identified a case of phishing emails that disguise themselves as project material purchase request forms. These emails impersonate employees of a specific company in Korea and trick recipients into opening a malicious XLS file attached to the email, which is disguised as a project material purchase request form. […]
First reported Sep 27, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Overview AhnLab monitored APT (Advanced Persistent Threat) attacks targeting entities in Korea using its own infrastructure. This report summarizes the types and statistics on domestic APT attacks identified during the month of August 2026. Trends of APT Attacks in South Korea Most of the APT attacks detected in South Korea were distributed via spear phishing […]
First reported Sep 29, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Content The AhnLab SEcurity intelligence Center (ASEC) analyzed the attack status of Windows web servers in the third quarter of 2026 based on AhnLab Smart Defense (ASD) logs. The targets were Internet Information Services (IIS) web servers and Apache Tomcat web servers running in Windows environments, with attacks primarily exploiting unpatched vulnerabilities, misconfigurations, and inadequate […]
First reported Oct 07, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
ASEC Blog publishes Ransom & Dark Web Issues Week 2, October 2026           International Operation Seizes KillSec Ransomware Infrastructure and Arrests Three Suspects Customer Data of a South Korean Health and Beauty Retailer Offered for Sale Saudi Intelligence Agency Personnel and Organizational Data Allegedly Leaked
First reported Oct 06, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Overview AI is being used for various tasks that were previously performed manually, such as research, document writing, and code analysis. A 2026 corporate survey also showed that the scope of AI adoption among organizations had expanded compared to the previous year. Recently, there has been a trend toward automating a significant portion of work […]
First reported Oct 14, 2026 09:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
The AhnLab SEcurity intelligence Center (ASEC) has been monitoring proxyjacking attacks and confirmed that, in the second half of 2026, the Larva-25012 threat actor has resumed actively distributing Proxyware. Rather than conducting malware distribution through new methods, the threat actor appears to have targeted already infected systems to distribute Proxyware.    1. Proxyjacking Attacks A […]
First reported Sep 16, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Content This report summarizes the distribution channels, number of Infostealers, number of detections, and companies disguised as targets by new Infostealers collected during the month of August 2026. It is based on data from AhnLab SEcurity intelligence Center (ASEC), AhnLab product diagnostic logs, automated data collection systems, email honeypot systems, and automated C2 analysis systems. […]
First reported Sep 21, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
ASEC Blog publishes Ransom & Dark Web Issues Week 4, September 2026           Metaencryptor Ransomware Attack on a South Korean Camera Module and Equipment Manufacturer Metaencryptor Ransomware Attack on a Japanese Automotive Parts Manufacturer ShinyHunters Claims Breach of a U.S. Federal Law Enforcement Agency and Theft of Sensitive Data
First reported Sep 22, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
Content The AhnLab SEcurity intelligence Center (ASEC) observed and classified attacks targeting MS-SQL servers and MySQL servers installed on Windows operating systems via the ASD infrastructure. This report summarizes the damage status, attack status, and the types of malware used in the attacks, based on logs identified in the third quarter of 2026. Purpose and […]
First reported Oct 07, 2026 15:00 UTCCatalog metadata updated Oct 15, 2026 23:31 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.