APT週次動向ブリーフ 2026-09-19

APT関連報道をとりまとめたもの

Transcript

1. APT 2026 9 12 — 9 19 : HIGH BlueMoon / GRIMWEDGE Chrome+Windows 0-day 3 9 8 HIGH WaterPlum 7 HIGH CHOSEN BRICK / HEAVYGRAM 1,071 ( 17 ) MOIS 4 3
2. CHINA-NEXUS 2026 9 12 — 19 BlueMoon / GRIMWEDGE Chrome/Windows 9 1 NGO 3 (CVE-2026-85046 CVE-2026-87491 CVE-2026-85880) JavaScript GRIMWEDGE (Volexity) UTA0560 APT31/TA412 UNK_LateNight (Proofpoint) 4 Volt Typhoon Salt Typhoon APT41 Flax Typhoon Mustang Panda : 9 9 HIGH CVE 4 1 : GRIMWEDGE / ShadowPad : NGO : Volexity(9/9) Proofpoint(9/9) The Hacker News(9/15)
3. RUSSIA-NEXUS 2026 9 12 — 19 9 12 APT MEDIUM HIGH 9 8 Trellix SecondSight (9/8): APT28 CVE-2026-21509 BEARDSHELL / NotDoor FSB Centre 18 TA446 iOS 9 ( ): APT29 CaptiveCrunch (7/31) Sandworm (8/8) Turla STOCKSTAY (6/25) CERT-EU Cyber Brief 26-09(9/3) CERT-UA UAC-xxxx : Trellix SecondSight Threat Hunting Report(9/8) CERT-EU Cyber Brief 26-09(9/3) Trellix 1 0 (9/12 )
4. DPRK-NEXUS 2026 9 12 — 19 WaterPlum 9 18 FBI BND/BfV 7 DC3 ( ) ASD/ACSC HIGH (CSA-260918) AI/NFT/ GitHub/GitLab IT npm 7 26 VS Code : BeaverTail InvisibleFerret OtterCookie OtterCandy StoatWaffle ScarCruft/APT37 TraderTraitor 313 17 1,071 7,000 : 2025 12 2026 7 100 3 : IC3.gov CSA-260918(9/18) ACSC The Register / Nippon.com(9/18)
5. IRAN-NEXUS 2026 9 12 — 19 CHOSEN BRICK / HEAVYGRAM 9 15 NCSC FBI AIVD (MOIS) HIGH 2023 : WhatsApp Norton Telegram 9 17 Group-IB HEAVYGRAM Banished Kitten) DOJ KeePass / Telegram / C2 Vultr Storj Void Manticore (Storm-0842 / Handala Hack OilRig/APT34 Charming Kitten/APT42 MuddyWater Agrius 3 DOJ 3 2023 TTP: PowerShell Defender DLL Vultr Object Storage : NCSC UK / FBI / AIVD (9/15) Group-IB HEAVYGRAM (9/17)