Trusted Design

KRBanker Targets South Korea Through Adware and Exploit Kits

概要

Online banking services have been a prime target of cyber criminals for many years and attacks continue to grow. Targeting online banking users and stealing their credentials has yielded huge profits for the criminals behind these campaigns. Unit 42 has been tracking “KRBanker” AKA ‘Blackmoon’, since late last year. This campaign specifically targets banks of the Republic of Korea. On April 23, researchers at Fortinet published a blog describing the functionalities of the recent ‘Blackmoon’ campaign. Our objective in this blog is to share additional details on the distribution of the KRBanker or Blackmoon malware campaign and indicators of KRBanker samples. Source : http://researchcenter.paloaltonetworks.com/2016/05/unit42-krbanker-targets-south-korea-through-adware-and-exploit-kits-2/ + https://github.com/pan-unit42/iocs/blob/master/krbanker/hashes.txt

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• FortiGuard Lion: A Peek into BlackMoon’s Sustained Attacks against South Korea (score: 0.73)
• South Korean Users Affected by BlackMoon Campaign (score: 0.70)
• Updated Blackmoon banking Trojan (score: 0.69)
• BlackEnergy by the SSHBearDoor (score: 0.67)
• "KUHOOK" POINT OF SALE MALWARE (score: 0.65)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る