ESETPDF
ESET APT Activity Report Q2 2023-Q3 2023: Government espionage and unpatched vulnerabilities
Excerpt
(eset):research
APT Activity
IRAN-ALIGNED CYBERATTACKS:
RISE IN DISRUPTIVE OPERATIONS
October 2023 – March 2024
Report
ESET APT ACTIVITY REPORT OCTOBER 2023 - MARCH 2024 | 2
Contents
Executive summary� 3
Attackers and targets� 4
China-aligned groups � 5
Mustang Panda targets the cargo shipping
industry in Europe� 6
Activities against Taiwan� 7
Our assessment of the I-SOON leaks� 7
Middle East-aligned groups � 9
BladedFeline� 10
POLONIUM� 10
Summary of Iran-aligned APT group activity� 11
Access brokering� 11
Impact attacks with wipers and ransomware� 12
North Korea-aligned groups � 13
Supply-chain attacks and trojanized installers� 14
Evolving attackers’ toolset� 15
Russia…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ESET on web-assets.esetstatic.com.
Mentioned in the excerpt
More from ESET16
- FishMonger’s arsenal upgraded: SprySOCKS for WindowsESET · Added 25 Oct
- ceranakeeper.pdfESET · Added 17 Oct
- Killing me gently: Inside Gentlemen’s EDR killer frameworkESET · Added 23 Sep
On the same topics
- ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoftMandiant (Google) · Published 25 Sep
- TA488 Targets Zimbra Mailservers with Half-Click ExploitsProofpoint · Published 15 Jul
- Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukrainebluecyber.hashnode.dev · Published 22 Jul
- DragonBreath: Dragon in the Kernelransom-isac.com · Published 22 Apr
