ESETPDF
ESET APT Activity Report Q4 2024-Q1 2025
Excerpt
(eset):research
APT Activity
WIPERS, PHISHING, AND
UNPATCHED VULNERABILITIES
October 2024 – March 2025
Report
ESET APT ACTIVITY REPORT OCTOBER 2024 - MARCH 2025 | 2
Contents
Executive summary� 3
Attackers and targets� 5
China-aligned groups � 6
China-aligned threat landscape in Europe� 7
Boarding pass to cyberespionage:
UnsolicitedBooker’s phishing campaign� 8
Some news from Worok� 9
Iran-aligned groups � 11
Clomping around the riverbank� 12
Loading up on reverse tunnels� 13
What’s old is new again� 13
Can you hear me now?� 13
Interesting C&C communications channels� 13
CyberToufan� 14
North Korea-aligned groups � 15
DeceptiveDevelopment diversifies� 16
Bybit hack� 17
Still offering dream jobs� 17
Spearphishing in South K…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ESET on web-assets.esetstatic.com.
Mentioned in the excerpt
More from ESET16
- FishMonger’s arsenal upgraded: SprySOCKS for WindowsESET · Added 25 Oct
- ceranakeeper.pdfESET · Added 17 Oct
- Killing me gently: Inside Gentlemen’s EDR killer frameworkESET · Added 23 Sep
On the same topics
- Why Are You Texting Me? UNC3944 Leverages SMS Phishing Campaigns for SIM Swapping, Ransomware, Extortion, and NotorietyMandiant (Google) · Published 14 Sep 2023
- Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific PasswordsCitizen Lab · Added 14 Oct
- Star Blizzard refines phishing and malware delivery with the RedFlick techniqueMicrosoft · Published 29 Sep
- New BugSleep Backdoor Deployed in Recent MuddyWater CampaignsCheck Point · Published 15 Jul 2024
