Threat Trend Report on APT Groups – July 2024 Major Issues on APT Groups

Threat Trend Report on APT Groups – July 2024 Major Issues on APT Groups

Purpose and Scope   This report covers nation-led threat groups presumed to conduct cyber espionage or sabotage under the support of the governments of certain countries, referred to as “Advanced Persistent Threat (APT) groups” for the sake of convenience. Therefore, this report does not contain information on cybercriminal groups aiming

Threat Trend Report on APT Groups – April 2024 Major Issues on APT Groups

Threat Trend Report on APT Groups – April 2024 Major Issues on APT Groups

The cases of major APT groups for April 2024 gathered from materials made public by security companies and institutions are as follows.   1)  APT28 (Forest Blizzard)   Microsoft Threat Intelligence released the results of the investigation on the activities of APT28, a Russia-based threat actor.[1] This group has been

Threat Trend Report on APT Groups – March 2024 Major Issues on APT Groups

Threat Trend Report on APT Groups – March 2024 Major Issues on APT Groups

The cases of major APT groups for March 2024 gathered from materials made public by security companies and institutions are as follows.   1)   Andariel   ASEC announced that the Andariel group is launching attacks using IMON Client and NetClient (Korean asset management solutions).[1] The group used self-developed malware strains

Threat Trend Report on APT Groups – February 2024 Major Issues on APT Groups

Threat Trend Report on APT Groups – February 2024 Major Issues on APT Groups

The cases of major APT groups for February 2024 gathered from materials made public by security companies and institutions are as follows.   1)   APT28   In January 2024, the United States government said it had shut down a botnet from the APT28 group suspected to be operated by the Main

Threat Trend Report on APT Groups – January 2024 Major Issues on APT Groups

Threat Trend Report on APT Groups – January 2024 Major Issues on APT Groups

     1)   APT28   Trend Micro revealed that the APT28 (Forest Blizzard, Pawn Storm) group executed NetNTLMv2 hash relay attacks exploiting the Outlook vulnerability (CVE-2023-23397) from April 2022 to November 2023 across various regions worldwide.1  The group targeted diplomatic, energy, national defense, transportation, labor, social welfare, financial, local council,

2023 Dec. – Threat Trend Report on APT Groups

2023 Dec. – Threat Trend Report on APT Groups

The cases of major APT groups for December 2023 gathered from materials made public by security companies and institutions are as follows.   1) Andariel The Korean police announced that the Andariel group attacked 14 targets in Korea including companies in the defense industry, IT security companies, research centers, and