绿盟科技（NSFOCUS）：2024年度高级持续性威胁（APT）态势报告（英文版）（22页）.pdf

1、2024 APT Annual Landscape Report PAGE 1 Table of Contents 2025.1 1.EXECUTIVE SUMMARY.1 2.ANNUAL APT ATTACK TRENDS.2 2.1 General Description.2 2.2 Overview of APT Threat Trends for This Year.2 2.3 APT Attacks in Key Regions.4 2.3.1 APT Attacks Targeting China.4 2.3.2 APT Activities in East Asia.5 2.3

2、.3 APT Activities in South Asia.6 2.3.4 APT Activities in East Europe.7 2.3.5 APT Activities in Middle East.8 3.ANNUAL KEY APT INCIDENTS.9 3.1 General Description.9 3.2 APT Attacks Targeting China.9 3.2.1 Actor 240315 Launched Cyberattacks Targeting China.9 3.2.2 Actor 240820 Launched Cyberattacks T

3、argeting Chinas Universities and Research Institutions.10 3.2.3 Anonymous64 Launched Cyberattacks Targeting Chinas Video Surveillance and Broadcast Systems.10 3.2.4 Pseudo Hunter Launched Cyberattacks Targeting Chinas Universities and Scientific Research Institutions.11 3.2.5 Multiple APT Groups fro

4、m India Launched Cyberattacks Targeting China.11 3.3 International APT Attack Incidents.12 3.3.1 New APT Group IdenFox Launched Cyberattacks Targeting Arab and Israeli Diplomats.12 3.3.2 APT Group DarkCasino Launched Cyberattack by Exploiting Zero-Day Vulnerabilities.13 3.3.3 Unknown APT Attackers L

5、aunched Supply Chain Poisoning against XZ-Utils Library.14 3.3.4 Lazarus Cyber Offensive Operations Using New BYOVD Technology.15 4.ANNUAL KEY APT TECHNOLOGIES AND TACTICS.16 4.1 General Description.16 4.2 Key Tactics Used by APT Groups.16 4.2.1 Botnet Takeover.16 4.2.2 False Flag.17 4.3 Key APT tec

6、hnologies.17 4.3.1 GrimResource.17 4.3.2 LOTL Attack.18 5.SUMMARY AND PREDICTION.19 APPENDIX A ABOUT NSFOCUS.20 APPENDIX B ABOUT FUYING LAB.20 PAGE 1 In 2024,the global landscape of APT attack remained highly relevant to the international political situation.This year,a large number of APT activitie