May 2026 Threat Trend Report on APT Attacks (South Korea)

May 2026 Threat Trend Report on APT Attacks (South Korea)

Overview AhnLab monitored APT (Advanced Persistent Threat) attacks—covert, sustained targeted attacks—using its own infrastructure. This report summarizes the types and statistics on domestic APT attacks identified during the month of May 2026 and discusses the characteristics of each type as well as AhnLab Response Overview. Trends of APT Attacks in

Security Issues in the Korean & Global Financial Sector in May 2026

Security Issues in the Korean & Global Financial Sector in May 2026

Statistics on Malware Distributed to the Financial Sector In Attack Stage 1 targeting the financial sector in May 2026, phishing had the highest score at 2.3. This is the highest figure since December 2025, indicating that Initial Breach attempts are increasingly centered on phishing. In Attack Stage 2, Dropper/Downloader had

Ransom & Dark Web Issues Week 4, May 2026

Ransom & Dark Web Issues Week 4, May 2026

ASEC Blog publishes Ransom & Dark Web Issues Week 4, May 2026           Customer Data of Japanese Educational Franchise Sold on BreachForums by Hasan Data from Japanese Government Agency for National Civil Servant Personnel Administration Sold on BreachForums by Hasan FBI Issues Warning Regarding Fraudulent FIFA

Spread and Evolution of AI-Based Hacking Tools – From Dark Web Distribution to Autonomous Attacks

Spread and Evolution of AI-Based Hacking Tools – From Dark Web Distribution to Autonomous Attacks

Key takeaway. since the emergence of WormGPT in June 2023, AI-based hacking tools have spread to the dark web, Telegram, GitHub, and Hugging Face. the market has evolved into a mix of paid subscription SaaS and free open-source distributions. key capabilities have been segmented into phishing automation, malware development, reconnaissance,

April 2026 Threat Trend Report on APT Attacks (South Korea)

April 2026 Threat Trend Report on APT Attacks (South Korea)

Overview ahnLab utilized its infrastructure to monitor Advanced Persistent Threat (APT) attacks on targets in Korea. this report summarizes the classification, statistics, and features of each type of APT attacks identified in Korea during the month of April 2026. Trends of APT Attacks in South Korea most of the APT

April 2026 Phishing Email Trends Report

April 2026 Phishing Email Trends Report

Statistics on Attachment Threat Types in April 2026, the most common threat in phishing email attachments was Trojan (47%). this type was distributed by disguising itself with a double extension or a legitimate file name to trick the user into executing it and installing malware on the system. they continued

March 2026 Phishing Email Trends Report

March 2026 Phishing Email Trends Report

Statistics on Attachment Threats Types. trojans accounted for the largest share of attachment-based threats in March 2026 at 21%. phishing (FakePage) came in at 15%, with a significant month-over-month decrease in share from 42% to 15%, but a slight decrease in volume. downloaders were identified at 9% and droppers at

February 2026 Phishing Email Trends Report

February 2026 Phishing Email Trends Report

Statistics on Attachment Threats Types in February 2026, the highest percentage of phishing email attachment threats is FakePage (42%). threat actors sophisticatedly mimic login pages and advertisement pages with HTML and other scripts to trick users into entering data and sending it to a C2 server or to a fake

January 2026 Phishing Email Trends Report

January 2026 Phishing Email Trends Report

This report provides the distribution quantity, statistics, trends, and case information on phishing emails and email threats collected and analyzed for one month in January 2026. The following are some statistics and cases included in the original report. 1) Phishing Email Threat Statistics In January 2026, the most prevalent threat

Guloader Malware Being Disguised as Employee Performance Reports

Guloader Malware Being Disguised as Employee Performance Reports

AhnLab SEcurity intelligence Center (ASEC) recently discovered the Guloader malware being distributed via phishing emails disguised as an employee performance report. The email claims to be informing the recipient about the report for October 2025, and prompts the recipient to check the attachment by mentioning the plan to dismiss some