{
  "name": "April 2025 Threat Trend Report on Ransomware",
  "slug": "april-2025-threat-trend-report-on-ransomware",
  "description": "This analysis presents ransomware statistics for April 2025, including new samples collected, affected systems, and targeted companies. The report shows a relative increase in new ransomware samples compared to March. It provides a six-month overview of collected samples and details on companies affected by various ransomware groups, based on information from dedicated leak sites. The data is collected through the ATIP infrastructure and includes MD5 hashes of some samples. The report aims to give a comprehensive view of the current ransomware landscape, both within Korea and internationally, offering valuable insights into the evolving threats posed by different ransomware groups.",
  "published": "2025-05-14T16:57:08+00:00",
  "created_at": "2025-05-14T16:57:08+00:00",
  "modified_at": "2025-05-21T18:23:44+00:00",
  "created_at_opencti": "2025-05-14T16:57:08+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-05-14",
    "affected companies",
    "atip infrastructure",
    "dedicated leak sites",
    "md5 hashes",
    "nightspire",
    "ransomware",
    "sample collection",
    "sarcoma",
    "statistics",
    "threat trends"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "e4383b3d43c95386342786ccba0f0a52f185b7e008b4f9e0a32263e94d37176f"
      },
      {
        "id": "",
        "name": "b31fbb61443ebb34d25eb109074e17e5be3f50d9fd265566dee37851ce6be512"
      },
      {
        "id": "",
        "name": "b2f5b352f2fd517237b0f95bc96d5033f8bad3f8f6d8ac2aea24fa053cccf0cd"
      },
      {
        "id": "",
        "name": "b19f7ad2902b65424313b1c06ac981e3b89062f201e6ad9f5f6f1d85a49090ce"
      },
      {
        "id": "",
        "name": "a263c29f773df8a0abbee3d595a081556530aa09bd8c55c8bffd257eaafd2f54"
      }
    ],
    "malware": [
      {
        "id": "legacy:malware:702c5e48e82039c2",
        "name": "Sarcoma",
        "slug": "sarcoma"
      },
      {
        "id": "d671ac55-db1a-480f-9d23-df9db719bbe6",
        "name": "Nightspire",
        "slug": "nightspire"
      }
    ],
    "attack_patterns": [
      {
        "id": "ecaaa4cc-d487-4002-bcb2-f769acfcc38f",
        "name": "T1490"
      },
      {
        "id": "232fbdfa-94c6-443d-b575-373e75b4f4c2",
        "name": "T1567"
      },
      {
        "id": "d9f271ed-7685-4362-b90d-f16a14102f39",
        "name": "T1489"
      },
      {
        "id": "f1bb7823-4f4b-4565-b472-bf0cfca467b1",
        "name": "T1486"
      },
      {
        "id": "d9b45b3b-d093-4016-89e9-48f31ff4d05d",
        "name": "T1566"
      },
      {
        "id": "6c8f8a40-2746-4a37-86bd-81e82afa6e62",
        "name": "T1190"
      },
      {
        "id": "b9eab970-53dd-4977-9a26-c4fe566e422d",
        "name": "T1133"
      },
      {
        "id": "9f11a241-9abc-4c57-95dd-33955ab08826",
        "name": "T1078"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Korea, Democratic People's Republic of"
      },
      {
        "id": "",
        "name": "Korea, Republic of"
      }
    ]
  },
  "external_refs": [
    "https://asec.ahnlab.com/en/87946",
    "https://otx.alienvault.com/pulse/6824e784b9b3cd96d2f35db4"
  ]
}