Published file metadata, source observations, indicators, and research history in one bounded catalog.
30Reachable catalog records
1 / 2Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_58179cc3a307a2fc7fCollection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
30 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
1. Overview The AhnLab SEcurity intelligence Center (ASEC) continuously monitors various threats targeting Linux environments. Techniques that modify the Linux kernel to conceal malware and signs of compromise have been used for a long time, and Syslogk is one such rootkit that operates in this manner. This document provides an analysis of the key features […]
First reported Sep 02, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
ASEC Blog publishes Ransom & Dark Web Issues Week 1, September 2026 ZaWoo Data Extortion Attacks Against Multiple Organizations Worldwide Black X Ransomware Attack on a South Korean Automotive Parts Manufacturer Internal Data of a South Korean Asset Management and Investment Firm Offered for Sale
First reported Sep 02, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
People who initially seem fine but tend to subtly avoid others as the relationship deepens or when conflicts arise—and who disappear when pressured—are commonly referred to as “avoidant types.” By repeatedly pulling away only to reappear, they drain the other person’s emotions and energy, ultimately undermining the relationship. The attack pattern of the recently […]
First reported Sep 01, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
A request to review the purchase of seafood ingredients arrived. When the file is opened, a normal hwp document appears, but while the user is reviewing the contents, a malicious script runs in the background and even registers a scheduled task. It then extracts system information to an external location, downloads and executes additional commands, […]
First reported Sep 01, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
The AhnLab SEcurity intelligence Center (ASEC) recently identified the LegionLoader malware, which is currently being distributed via the ClickFix method. There are two main distribution methods identified so far; both involve tricking users into visiting a malicious URL and then prompting them to directly execute malicious PowerShell commands through a fake Cloudflare CAPTCHA screen. […]
First reported Sep 02, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Overview AhnLab monitored APT (Advanced Persistent Threat) attacks targeting entities in Korea using its own infrastructure. This report summarizes the classification, statistics, and functional characteristics for each type of domestic APT attacks identified during the month of July 2026. Trends of APT Attacks in South Korea Most APT attacks detected in South Korea were distributed […]
First reported Aug 27, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Statistics on Malware Distributed to the Financial Sector Malware Distribution Trends. In Attack Stage 1, phishing was the highest at 2.1, Up from 1.8 The previous month. In Attack Stage 2, dropper/downloader was the highest at 1.1, Down from 3.2 The previous month. In Stage 3 of the attack, Infostealers were the most prevalent at […]
First reported Sep 07, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
ASEC Blog publishes Ransom & Dark Web Issues Week 2, September 2026 The Gentlemen Ransomware Attack on a Canadian Airline LAPSUS$ Group Resumes Chapter II and Teases New Victim Disclosure AUDIT TEAM Data Extortion Attacks on Four Organizations in South Korea, Germany, and Argentina
First reported Sep 09, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
The AhnLab SEcurity intelligence Center (ASEC) recently identified attack cases that exploited Radmin and UltraVNC. Although the Initial Intrusion method remains unknown, the attackers installed Radmin—a remote control tool—and then installed UltraVNC. The threat actors exploited the remote control tools to gain control of the infected systems and installed Netch and CCProxy to use the […]
First reported Sep 02, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Purpose and Scope This report summarizes statistics on new ransomware samples, affected systems, and statistics on targeted businesses collected during the month of August 2026, as well as major Korean & Global ransomware issues. Statistics on targeted businesses were compiled based on the time when publicly available information from ransomware groups’ DLS (Dedicated Leak Sites, […]
First reported Sep 22, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
The threat actor used SEO poisoning (a technique that exploits search results to redirect users to fake sites) to distribute a malicious installer disguised as a KakaoTalk installer. The appearance and packaging method of the installer changed continuously, and the threat actor sequentially used NSIS, Advanced Installer, and Inno Setup. It contained both legitimate installation […]
First reported Sep 27, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Note The August 2026 Dark Web Threat Actor Trend Report focuses on trends among threat actors—including hacktivists—active on the deep web and dark web. It is noted that the accuracy of some information could not be verified. Major Issues NoName057(16), BD Anonymous, and Dark Storm Team claimed responsibility for repeated DDoS attacks targeting websites of […]
First reported Sep 13, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
ASEC Blog publishes Ransom & Dark Web Issues Week 2, October 2026 International Operation Seizes KillSec Ransomware Infrastructure and Arrests Three Suspects Customer Data of a South Korean Health and Beauty Retailer Offered for Sale Saudi Intelligence Agency Personnel and Organizational Data Allegedly Leaked
First reported Oct 06, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Note The August 2026 Dark Web Issue Trend Report summarizes Major Issues that occurred on the deep web and dark web. The report notes that, due to the nature of its sources, it may contain some information whose accuracy cannot be fully verified. Major Issue After the RaidForums domain was suspended, a new domain was […]
First reported Sep 13, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Note In August 2026, widespread instances of database leaks, the sale of internal data, and the trading of initial access privileges were observed on dark web and deep web forums. Due to the nature of the sources, it was difficult to fully verify the accuracy of some posts. Major Issues ShinyHunters continued to make claims […]
First reported Sep 13, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Recently, the AhnLab SEcurity intelligence Center (ASEC) confirmed that phishing emails disguised as requests for project quotes are being circulated. The email body is disguised as a request to submit a quote for discussing the project budget and prompts recipients to download an attached compressed file for verification. [Figure 1] Phishing email body […]
First reported Sep 27, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
ASEC Blog publishes Ransom & Dark Web Issues Week 4, September 2026 Metaencryptor Ransomware Attack on a South Korean Camera Module and Equipment Manufacturer Metaencryptor Ransomware Attack on a Japanese Automotive Parts Manufacturer ShinyHunters Claims Breach of a U.S. Federal Law Enforcement Agency and Theft of Sensitive Data
First reported Sep 22, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Summary of Vulnerability Trends for the Third Quarter of 2026 A total of 36,971 CVEs were disclosed in the third quarter of 2026, representing an increase of approximately 78.6% Compared to the second quarter. Among the vulnerabilities for which CVSS assessments were completed, approximately 12.7% Were rated “Critical” and approximately 42.6% Were rated “High,” meaning […]
First reported Oct 06, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Just because it’s a familiar tactic doesn’t mean you can let your guard down. A similar attack method using cryptocurrency rewards as bait has recently been identified again. This time, a case was confirmed in which the Node.Js-based malware JSCEAL was distributed through Facebook ads impersonating a cryptocurrency exchange. The threat actors lured users to […]
First reported Sep 29, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Content This report summarizes the distribution channels, number of Infostealers, number of detections, and companies disguised as targets by new Infostealers collected during the month of August 2026. It is based on data from AhnLab SEcurity intelligence Center (ASEC), AhnLab product diagnostic logs, automated data collection systems, email honeypot systems, and automated C2 analysis systems. […]
First reported Sep 21, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
ASEC Blog publishes Ransom & Dark Web Issues Week 3, September 2026 Internal Data of a Japanese Pharmaceutical and Healthcare Company Offered for Sale Following a Cyber Incident Customer Data of a South Korean E-Commerce and Retail Company Offered for Sale AUDIT TEAM Ransomware Attacks on Two South Korean Organizations
First reported Sep 16, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
AhnLab SEcurity intelligence Center (ASEC) recently identified a case in which ransomware was distributed through a private home trading system (HTS). The HTS program used to distribute the ransomware is called “UBP Asset” and has long been exploited in online investment scams. Given that a photo of the same HTS program was also found in […]
First reported Sep 15, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
Overview AhnLab monitored APT (Advanced Persistent Threat) attacks targeting entities in Korea using its own infrastructure. This report summarizes the types and statistics on domestic APT attacks identified during the month of August 2026. Trends of APT Attacks in South Korea Most of the APT attacks detected in South Korea were distributed via spear phishing […]
First reported Sep 29, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
ASEC Blog publishes Ransom & Dark Web Issues Week 1, October 2026 Dutch Police Confirm Arrest of 24-Year-Old Man in ShinyHunters Hacking Investigation [1] [2] Ulose Claims Data Leak from a South Korean General Hospital Qilin Ransomware Attack on a Japanese Freight and Logistics Company
First reported Sep 30, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:41 UTCOpen evidence record
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.