CYFIRMA Research- APT Quarterly Highlights- Q4 2024

Our Q4 2024 APT Quarterly Highlights Report unveils a surge of dynamic and innovative cyber activities from APT groups across Iran, North Korea, Russia, and China. These groups intensified operations with a sharp focus on credential theft through phishing, MFA push-bombing, and fake job scams. RomCom (Russia) and Lazarus (North Korea) exploited zero-day vulnerabilities in Mozilla, Windows, and Google Chrome for stealthy malware deployment, while Jumpy Pisces (Andariel) partnered with Play ransomware, signaling North Korea’s growing reliance on ransomware for revenue.

Evasive Panda (China) shifted towards cloud-based espionage, targeting Google Drive and Outlook with CloudScout malware. Meanwhile, Iranian APTs like Emennet Pasargad escalated hack-and-leak campaigns, blending cyber intrusions with disinformation against Israel, the U.S., and Europe. Across the board, APTs maintained persistent access to government, aerospace, energy, defense, and financial sectors, underscoring a strategic focus on intelligence collection and disruption. Stay ahead of emerging threats with CYFIRMA’s ongoing monitoring of APT Threat Landscape.

Link to the Research Report: https://www.cyfirma.com/research/apt-quarterly-highlights-q4-2024/

#CyberSecurity #APTHighlights #Q4APTReport #ThreatIntelligence #Cybersecurity
#Q42024Report  #APTActivities #cyberthreats  #ExternalThreatLandscapeManagement #AdvancedPersistentThreat
#CYFIRMA #CyfirmaResearch #ETLM

https://www.cyfirma.com/