October 2023

ESET APT Activity Report Q2 2023–Q3 2023 summarizes the activities of selected advanced persistent threat (APT) groups that were observed, investigated, and analyzed by ESET researchers from April 2023 until the end of September 2023.

In the monitored timespan, we observed a notable strategy of APT groups utilizing the exploitation of known vulnerabilities to exfiltrate data from governmental entities or related organizations.

Malicious activities described in ESET APT Activity Report Q2–Q3 2023 are detected by ESET products; shared intelligence is based mostly on proprietary ESET telemetry data and has been verified by ESET researchers.

The selection of countries, regions and verticals that were affected by the APT groups described in this Report:

• Australia
• Armenia
• China
• Croatia
• Czechia
• Greece
• Hong Kong
• Israel
• Japan
• Kuwait
• Mali
• Poland
• Serbia
• Slovakia
• South Korea
• United Kingdom
• United States
• Ukraine
• Uyghurs and other Turkic ethnic minorities

Targeted business verticals include:

• Gambling companies and their customers
• Governmental organizations and entities
• Hosting providers
• Industrial networks
• IT companies
• Local governments and institutions
• Media organizations
• Political entities
• Private companies
• Scholars and journalists specializing in North Korea
• Research institutes
• Telecommunication operators
• Universities

ESET APT Activity Reports contain only a fraction of the cybersecurity intelligence data provided in ESET APT Reports PREMIUM. For more information, visit the ESET Threat Intelligence website.