Trusted Design

Updated Blackmoon banking Trojan

概要

First analyzed in early 2014 [1] [2], the Blackmoon banking Trojan targets a user’s online banking credentials using a type of pharming that involves modifying or replacing the local Hosts file with one that redirects online banking domain lookups to an IP address controlled by the attacker. Blackmoon has been observed targeting primarily customers of South Korean online banking sites and services, and is usually distributed via drive-by download. Source : https://www.proofpoint.com/us/threat-insight/post/Updated-Blackmoon-Banking-Trojan

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

このPulseに関連する脅威アクター (事実ベース)

APT41

Score: 13.05
Matched TTPs:
  • T1568.002 - Domain Generation Algorithms
  • T1190 - Exploit Public-Facing Application
  • T1046 - Network Service Discovery
  • T1569.002 - Service Execution
  • T1102.001 - Dead Drop Resolver
MITREへのリンク →

TA551

Score: 4.13
Matched TTPs:
  • T1568.002 - Domain Generation Algorithms
MITREへのリンク →

Kimsuky

Score: 32.74
Matched TTPs:
  • T1036.007 - Double File Extension
  • T1598.003 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1657 - Financial Theft
  • T1583.006 - Web Services
  • T1593 - Search Open Websites/Domains
  • T1588.005 - Exploits
  • T1102.001 - Dead Drop Resolver
  • T1584.001 - Domains
  • T1078.003 - Local Accounts
MITREへのリンク →

Mustang Panda

Score: 17.14
Matched TTPs:
  • T1036.007 - Double File Extension
  • T1598.003 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1583.006 - Web Services
  • T1593 - Search Open Websites/Domains
  • T1046 - Network Service Discovery
MITREへのリンク →

Volt Typhoon

Score: 13.76
Matched TTPs:
  • T1584.008 - Network Devices
  • T1190 - Exploit Public-Facing Application
  • T1584.005 - Botnet
  • T1593 - Search Open Websites/Domains
  • T1046 - Network Service Discovery
MITREへのリンク →

APT28

Score: 24.96
Matched TTPs:
  • T1584.008 - Network Devices
  • T1598.003 - Spearphishing Link
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1583.006 - Web Services
  • T1589.001 - Credentials
  • T1189 - Drive-by Compromise
  • T1498 - Network Denial of Service
  • T1550.001 - Application Access Token
MITREへのリンク →

ZIRCONIUM

Score: 9.61
Matched TTPs:
  • T1584.008 - Network Devices
  • T1598.003 - Spearphishing Link
  • T1583.001 - Domains
  • T1583.006 - Web Services
MITREへのリンク →

Leviathan

Score: 19.10
Matched TTPs:
  • T1584.008 - Network Devices
  • T1586.001 - Social Media Accounts
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1589.001 - Credentials
  • T1189 - Drive-by Compromise
  • T1027.015 - Compression
MITREへのリンク →

Mustard Tempest

Score: 11.56
Matched TTPs:
  • T1583.008 - Malvertising
  • T1608.001 - Upload Malware
  • T1189 - Drive-by Compromise
  • T1584.001 - Domains
MITREへのリンク →

Sandworm Team

Score: 22.30
Matched TTPs:
  • T1586.001 - Social Media Accounts
  • T1598.003 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1584.005 - Botnet
  • T1593 - Search Open Websites/Domains
  • T1592.002 - Software
MITREへのリンク →

Scattered Spider

Score: 6.50
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1583.001 - Domains
  • T1657 - Financial Theft
MITREへのリンク →

Silent Librarian

Score: 3.98
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1583.001 - Domains
MITREへのリンク →

APT32

Score: 20.40
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1550.003 - Pass the Ticket
  • T1583.006 - Web Services
  • T1189 - Drive-by Compromise
  • T1046 - Network Service Discovery
  • T1569.002 - Service Execution
  • T1078.003 - Local Accounts
MITREへのリンク →

Magic Hound

Score: 24.08
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1583.006 - Web Services
  • T1592.002 - Software
  • T1589.001 - Credentials
  • T1189 - Drive-by Compromise
  • T1046 - Network Service Discovery
  • T1566.003 - Spearphishing via Service
  • T1584.001 - Domains
MITREへのリンク →

Star Blizzard

Score: 9.23
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1593 - Search Open Websites/Domains
MITREへのリンク →

Moonstone Sleet

Score: 10.87
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1569.002 - Service Execution
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

CURIUM

Score: 11.89
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1583.001 - Domains
  • T1584.006 - Web Services
  • T1189 - Drive-by Compromise
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Dragonfly

Score: 7.21
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1189 - Drive-by Compromise
MITREへのリンク →

Patchwork

Score: 7.51
Matched TTPs:
  • T1598.003 - Spearphishing Link
  • T1189 - Drive-by Compromise
  • T1102.001 - Dead Drop Resolver
MITREへのリンク →

TA2541

Score: 8.65
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1583.006 - Web Services
  • T1027.015 - Compression
MITREへのリンク →

Earth Lusca

Score: 12.36
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1583.006 - Web Services
  • T1584.006 - Web Services
  • T1189 - Drive-by Compromise
MITREへのリンク →

OilRig

Score: 11.40
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1555.004 - Windows Credential Manager
  • T1046 - Network Service Discovery
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

TeamTNT

Score: 5.26
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1046 - Network Service Discovery
MITREへのリンク →

LazyScripter

Score: 5.50
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1583.006 - Web Services
MITREへのリンク →

Gamaredon Group

Score: 8.65
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1583.006 - Web Services
  • T1027.015 - Compression
MITREへのリンク →

Threat Group-3390

Score: 11.64
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1189 - Drive-by Compromise
  • T1046 - Network Service Discovery
  • T1027.015 - Compression
MITREへのリンク →

SideCopy

Score: 5.26
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1584.001 - Domains
MITREへのリンク →

TA505

Score: 3.49
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
MITREへのリンク →

BlackByte

Score: 7.61
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1190 - Exploit Public-Facing Application
  • T1046 - Network Service Discovery
  • T1569.002 - Service Execution
MITREへのリンク →

BITTER

Score: 3.49
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
MITREへのリンク →

HEXANE

Score: 3.49
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
MITREへのリンク →

Saint Bear

Score: 3.99
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.006 - Web Services
MITREへのリンク →

Contagious Interview

Score: 13.83
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1657 - Financial Theft
  • T1583.006 - Web Services
  • T1593 - Search Open Websites/Domains
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

FIN7

Score: 16.57
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1674 - Input Injection
  • T1583.006 - Web Services
  • T1569.002 - Service Execution
  • T1078.003 - Local Accounts
MITREへのリンク →

EXOTIC LILY

Score: 6.01
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

APT42

Score: 3.49
Matched TTPs:
  • T1608.001 - Upload Malware
  • T1583.001 - Domains
MITREへのリンク →

Rocke

Score: 6.52
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1046 - Network Service Discovery
  • T1102.001 - Dead Drop Resolver
MITREへのリンク →

Ember Bear

Score: 7.37
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1046 - Network Service Discovery
  • T1588.005 - Exploits
MITREへのリンク →

BackdoorDiplomacy

Score: 3.24
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1046 - Network Service Discovery
MITREへのリンク →

FIN13

Score: 10.30
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1657 - Financial Theft
  • T1046 - Network Service Discovery
  • T1556 - Modify Authentication Process
MITREへのリンク →

BlackTech

Score: 3.24
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1046 - Network Service Discovery
MITREへのリンク →

Medusa Group

Score: 10.17
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1657 - Financial Theft
  • T1583.006 - Web Services
  • T1046 - Network Service Discovery
  • T1569.002 - Service Execution
MITREへのリンク →

Sea Turtle

Score: 5.65
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1078.003 - Local Accounts
MITREへのリンク →

Storm-0501

Score: 3.99
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1657 - Financial Theft
MITREへのリンク →

Fox Kitten

Score: 3.24
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1046 - Network Service Discovery
MITREへのリンク →

Cinnamon Tempest

Score: 3.99
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1657 - Financial Theft
MITREへのリンク →

Ke3chang

Score: 3.87
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1569.002 - Service Execution
MITREへのリンク →

Agrius

Score: 3.24
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1046 - Network Service Discovery
MITREへのリンク →

menuPass

Score: 4.75
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1046 - Network Service Discovery
MITREへのリンク →

ToddyCat

Score: 3.99
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Blue Mockingbird

Score: 3.87
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1569.002 - Service Execution
MITREへのリンク →

Winter Vivern

Score: 12.91
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1583.001 - Domains
  • T1056.003 - Web Portal Capture
  • T1584.006 - Web Services
  • T1189 - Drive-by Compromise
MITREへのリンク →

APT29

Score: 17.05
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1550.003 - Pass the Ticket
  • T1583.006 - Web Services
  • T1090.004 - Domain Fronting
  • T1566.003 - Spearphishing via Service
  • T1078.003 - Local Accounts
MITREへのリンク →

INC Ransom

Score: 8.16
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1657 - Financial Theft
  • T1046 - Network Service Discovery
  • T1569.002 - Service Execution
MITREへのリンク →

Axiom

Score: 6.86
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1584.005 - Botnet
  • T1189 - Drive-by Compromise
MITREへのリンク →

Play

Score: 6.66
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1657 - Financial Theft
  • T1078.003 - Local Accounts
MITREへのリンク →

HAFNIUM

Score: 13.90
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1584.005 - Botnet
  • T1583.006 - Web Services
  • T1550.001 - Application Access Token
  • T1078.003 - Local Accounts
MITREへのリンク →

MuddyWater

Score: 3.48
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1583.006 - Web Services
MITREへのリンク →

APT39

Score: 5.63
Matched TTPs:
  • T1190 - Exploit Public-Facing Application
  • T1046 - Network Service Discovery
  • T1569.002 - Service Execution
MITREへのリンク →

Storm-1811

Score: 4.04
Matched TTPs:
  • T1583.001 - Domains
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

APT1

Score: 4.80
Matched TTPs:
  • T1583.001 - Domains
  • T1584.001 - Domains
MITREへのリンク →

IndigoZebra

Score: 3.53
Matched TTPs:
  • T1583.001 - Domains
  • T1583.006 - Web Services
MITREへのリンク →

Transparent Tribe

Score: 6.57
Matched TTPs:
  • T1583.001 - Domains
  • T1189 - Drive-by Compromise
  • T1584.001 - Domains
MITREへのリンク →

Lazarus Group

Score: 9.58
Matched TTPs:
  • T1583.001 - Domains
  • T1583.006 - Web Services
  • T1189 - Drive-by Compromise
  • T1046 - Network Service Discovery
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

APT38

Score: 5.68
Matched TTPs:
  • T1583.001 - Domains
  • T1189 - Drive-by Compromise
  • T1569.002 - Service Execution
MITREへのリンク →

MoustachedBouncer

Score: 4.54
Matched TTPs:
  • T1659 - Content Injection
MITREへのリンク →

BRONZE BUTLER

Score: 8.90
Matched TTPs:
  • T1550.003 - Pass the Ticket
  • T1189 - Drive-by Compromise
  • T1102.001 - Dead Drop Resolver
MITREへのリンク →

Turla

Score: 13.69
Matched TTPs:
  • T1583.006 - Web Services
  • T1584.006 - Web Services
  • T1555.004 - Windows Credential Manager
  • T1189 - Drive-by Compromise
  • T1078.003 - Local Accounts
MITREへのリンク →

Andariel

Score: 5.61
Matched TTPs:
  • T1592.002 - Software
  • T1189 - Drive-by Compromise
MITREへのリンク →

LAPSUS$

Score: 3.44
Matched TTPs:
  • T1589.001 - Credentials
MITREへのリンク →

Chimera

Score: 7.60
Matched TTPs:
  • T1589.001 - Credentials
  • T1046 - Network Service Discovery
  • T1569.002 - Service Execution
MITREへのリンク →

Stealth Falcon

Score: 3.62
Matched TTPs:
  • T1555.004 - Windows Credential Manager
MITREへのリンク →

Wizard Spider

Score: 6.02
Matched TTPs:
  • T1555.004 - Windows Credential Manager
  • T1569.002 - Service Execution
MITREへのリンク →

RTM

Score: 5.05
Matched TTPs:
  • T1189 - Drive-by Compromise
  • T1102.001 - Dead Drop Resolver
MITREへのリンク →

Windshift

Score: 4.29
Matched TTPs:
  • T1189 - Drive-by Compromise
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Dark Caracal

Score: 4.29
Matched TTPs:
  • T1189 - Drive-by Compromise
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Leafminer

Score: 3.53
Matched TTPs:
  • T1189 - Drive-by Compromise
  • T1046 - Network Service Discovery
MITREへのリンク →

PROMETHIUM

Score: 4.43
Matched TTPs:
  • T1189 - Drive-by Compromise
  • T1078.003 - Local Accounts
MITREへのリンク →

Tropic Trooper

Score: 4.43
Matched TTPs:
  • T1046 - Network Service Discovery
  • T1078.003 - Local Accounts
MITREへのリンク →

FIN6

Score: 6.69
Matched TTPs:
  • T1046 - Network Service Discovery
  • T1569.002 - Service Execution
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Velvet Ant

Score: 5.06
Matched TTPs:
  • T1569.002 - Service Execution
  • T1078.003 - Local Accounts
MITREへのリンク →

Molerats

Score: 3.15
Matched TTPs:
  • T1027.015 - Compression
MITREへのリンク →

Higaisa

Score: 3.15
Matched TTPs:
  • T1027.015 - Compression
MITREへのリンク →

Mofang

Score: 3.15
Matched TTPs:
  • T1027.015 - Compression
MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.80
Matched TTPs:
  • T1657 - Financial Theft
  • T1593 - Search Open Websites/Domains
  • T1102.001 - Dead Drop Resolver
  • T1584.001 - Domains
  • T1036.007 - Double File Extension
  • T1583.001 - Domains
  • T1608.001 - Upload Malware
  • T1588.005 - Exploits
  • T1598.003 - Spearphishing Link
  • T1190 - Exploit Public-Facing Application
  • T1583.006 - Web Services
  • T1078.003 - Local Accounts
MITREへのリンク →

APT28

Score: 0.65
Matched TTPs:
  • T1584.008 - Network Devices
  • T1550.001 - Application Access Token
  • T1498 - Network Denial of Service
  • T1583.001 - Domains
  • T1189 - Drive-by Compromise
  • T1598.003 - Spearphishing Link
  • T1190 - Exploit Public-Facing Application
  • T1583.006 - Web Services
  • T1589.001 - Credentials
MITREへのリンク →

Magic Hound

Score: 0.61
Matched TTPs:
  • T1584.001 - Domains
  • T1592.002 - Software
  • T1583.001 - Domains
  • T1189 - Drive-by Compromise
  • T1046 - Network Service Discovery
  • T1566.003 - Spearphishing via Service
  • T1598.003 - Spearphishing Link
  • T1190 - Exploit Public-Facing Application
  • T1583.006 - Web Services
  • T1589.001 - Credentials
MITREへのリンク →

Sandworm Team

Score: 0.59
Matched TTPs:
  • T1593 - Search Open Websites/Domains
  • T1586.001 - Social Media Accounts
  • T1583.001 - Domains
  • T1584.005 - Botnet
  • T1608.001 - Upload Malware
  • T1592.002 - Software
  • T1598.003 - Spearphishing Link
  • T1190 - Exploit Public-Facing Application
MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

← Pulse一覧に戻る