ESETPDF
eset-apt-activity-report-q2-2025-q3-2025.pdf
Excerpt
(eset):research
APT Activity
RUSSIA-ALIGNED APTs RAMP UP ATTACKS
AGAINST UKRAINE AND ITS STRATEGIC PARTNERS
April 2025 – September 2025
Report
ESET APT ACTIVITY REPORT APRIL 2025 - SEPTEMBER 2025 | 2
Contents
Executive summary 3
Attackers and targets 5
China 6
Notable China-aligned activity worldwide 7
FamousSparrow’s Latin American tour 9
APT groups using adversary-in-the-middle 9
Iran 11
MuddyWater internally spearphishes its way around
the world 12
GalaxyGato goes for a Greek gyro 13
North Korea 14
DeceptiveDevelopment: Faux IT workers of the
world, unite! 16
Supply-chain and watering-hole attacks targeting
South Korea 16
Relentless Lazarus 16
Other noteworthy activities 16
APT down – the North Korea files 17
Russia 18
RomCom uses WinRAR zero day 19
Gamaredon…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ESET on web-assets.esetstatic.com.
Mentioned in the excerpt
More from ESET16
- FishMonger’s arsenal upgraded: SprySOCKS for WindowsESET · Added 25 Oct
- ceranakeeper.pdfESET · Added 17 Oct
- Killing me gently: Inside Gentlemen’s EDR killer frameworkESET · Added 23 Sep
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Chinese Nation-State Hackers Target U.S in Operation TradeSecret, Report Claimseweek.com · Published 6 Apr 2017
- Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:Medium · Published 10 Jun 2022
