ESET Resource Center

APT Activity Report T3 2022: Sandworm Deploying its Enhanced Wiper Arsenal

January 2023

APT Activity Report T3 2022: Sandworm Deploying its Enhanced Wiper Arsenal

ESET APT Activity Report T3 2022 summarizes the activities of selected advanced persistent threat (APT) groups that were observed, investigated, and analyzed by ESET researchers from September until the end of December 2022.

In the monitored timespan, Russia-aligned APT groups continued to be particularly involved in operations targeting Ukraine, deploying destructive wipers and ransomware. Among many other cases, ESET researchers detected the infamous Sandworm group using a previously unknown wiper against an energy sector company in Ukraine.

ESET researchers also detected a MirrorFace spearphishing campaign targeting political entities in Japan and noticed a gradual change in the targeting of some China-aligned groups. Iran-aligned groups continued to operate at a high volume – besides Israeli companies, POLONIUM also started targeting foreign subsidiaries of Israeli companies. In various parts of the world, North Korea-aligned groups used old exploits to compromise cryptocurrency firms and exchanges.

In addition, a cyberespionage group that targets high-profile government entities in Central Asia has been discovered, and ESET researchers named it SturgeonPhisher.

Don't miss out

PREMIUM CONTENT

REPORTS


ESET a 'Leader' in IDC MarketScape 2024

ESET has been recognized as a 'Leader' and twice as a Major Player in three Modern Endpoint Security IDC MarketScape reports. Learn more!

PREMIUM CONTENT

REPORTS


Radicati APT Protection Market Quadrant 2024

ESET has been named a 'Top Player' by Radicati in the Advanced Persistent Threat Market Quadrant 2024. See the evaluation!

PREMIUM CONTENT

WHITE PAPERS


NIS2 Compliance: Board-Level Awareness and Action Strategies

Learn how to leverage NIS2 as a business enabler with ESET's insights on how to talk to the board from CISO perspective about the importance and full adoption of the directive.

Ready for next step?

Enter the world of enterprise protection