【ニュース】
◆暗号通貨マイナーのXMRigが1位、7月マルウェアランキング (マイナビニュース, 2019/08/11 10:38)
https://news.mynavi.jp/article/20190811-874793/
【関連まとめ記事】
◆全体まとめ
◆マルウェア / Malware (まとめ)
◆マイニングマルウェア (まとめ)
◆XMRig (まとめ)
https://malware-log.hatenablog.com/entry/XMRig
【ランキング】
■PC
順位 | マルウェア名 | 7月 | 6月 | 5月 | 4月 | 3月 | 2月 | 1月 | 12月 | 11月 | 10月 | 9月 | 8月 | 7月 | 6月 | 5月 |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | XMRig | 1 | 1 | 2 | 2 | 3 | 4 | 2 | 2 | 9 | 7 | 8 | 7 | 7 | 7 | 7 |
2 | Jsecoin | 2 | 2 | 3 | 3 | 5 | 5 | 4 | 3 | 6 | 6 | 5 | 5 | 5 | 6 | 4 |
3 | Dorkbot | 3 | 4 | 7 | 5 | 4 | 6 | 7 | 7 | 5 | 3 | 2 | 2 | 3 | 3 | 8 |
4 | Emotet | 4 | 5 | 4 | 4 | 2 | 3 | 5 | 5 | 7 | - | 10 | - | - | - | - |
5 | Nanocore | 5 | 8 | - | - | - | - | - | - | - | - | - | - | - | - | - |
6 | Agentesla | 6 | - | 10 | 7 | - | - | - | - | - | - | - | - | - | - | - |
7 | Trickbot | 7 | 10 | 8 | 8 | - | - | - | - | - | - | - | - | - | - | - |
8 | Ramnit | 8 | 6 | 5 | 6 | 7 | 10 | 10 | 8 | - | 8 | 7 | 6 | 10 | 10 | - |
9 | Formbook | 9 | 9 | - | - | - | - | - | - | - | - | - | - | - | - | - |
10 | Cryptoloot | 10 | 3 | 1 | 1 | 1 | 2 | 3 | 4 | 2 | 2 | 3 | 4 | 2 | 2 | 2 |
- | Hawkeye | - | 7 | - | - | - | - | - | - | - | - | - | - | - | - | - |
- | Lokibot | - | - | 6 | 10 | 9 | - | 8 | - | - | - | - | - | - | - | - |
- | Nivdort | - | - | 9 | - | 8 | 7 | 6 | 6 | 10 | - | - | 10 | - | 8 | - |
- | Sality | - | - | - | 9 | - | - | - | - | - | - | - | - | - | - | - |
- | Coinhive | - | - | - | - | 6 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 |
- | Mirai | - | - | - | - | 10 | - | - | - | - | - | - | - | - | - | - |
- | Gandcrab | - | - | - | - | - | 8 | 9 | - | - | - | - | - | - | - | - |
- | Smokeloader | - | - | - | - | - | - | - | 9 | - | - | - | - | - | - | - |
- | Authedmine | - | - | - | - | - | 9 | - | 10 | - | - | - | - | - | - | - |
- | Andromeda | - | - | - | - | - | - | - | - | 3 | 5 | 4 | 3 | 4 | 4 | 5 |
- | Roughted | - | - | - | - | - | - | - | - | 4 | 4 | 6 | 8 | 6 | 5 | 3 |
- | Conficker | - | - | - | - | - | - | - | - | 8 | 9 | 9 | 9 | 8 | - | 10 |
- | FlawedAmmyy RAT | - | - | - | - | - | - | - | - | - | 10 | - | - | - | - | - |
- | Fireball | - | - | - | - | - | - | - | - | - | - | - | - | - | - | 6 |
- | Necurs | - | - | - | - | - | - | - | - | - | - | - | - | - | - | 9 |
■モバイル
順位 | マルウェア名 | 7月 | 6月 | 5月 | 4月 |
---|---|---|---|---|---|
1 | Lotoor | 1 | 1 | 1 | 2 |
2 | AndroidBauts | 2 | - | - | - |
3 | Piom | 3 | - | - | - |
- | Triada | - | 2 | 3 | 1 |
- | Ztorg | - | 3 | - | - |
- | Hiddad | - | - | 2 | 3 |
■脆弱性
順位 | 脆弱性 | 7月 | 6月 | 5月 | 4月 |
---|---|---|---|---|---|
1 | SQL Injection (several techniques) | 1 | 1 | 1 | - |
2 | OpenSSL TLS DTLS Heartbeat Information Disclosure | 2 | 2 | 3 | 1 |
3 | MVPower DVR Remote Code Execution | 3 | - | - | - |
4 | Web Server Exposed Git Repository Information Disclosure | 4 | 4 | 2 | - |
5 | Joomla Object Injection Remote Command Execution) | 5 | 3 | 4 | - |
6 | PHP DIESCAN information disclosure | 6 | 5 | 7 | - |
7 | WordPress portable-phpMyAdmin Plugin Authentication Bypass | 7 | 6 | 10 | - |
8 | OpenDreamBox WebAdmin Plugin Remote Code Execution | 8 | - | - | - |
9 | D-Link DSL-2750B Remote Command Execution | 9 | 9 | 8 | - |
- | Command Injection Over HTTP | - | 7 | - | - |
- | Apache Struts2 Content-Type Remote Code Execution (CVE-2017-5638) | - | 8 | 6 | 3 |
- | Microsoft IIS WebDAV ScStoragePathFromUrl Buffer Overflow (CVE-2017-7269) | - | 10 | 5 | 2 |