IT threat evolution Q3 2024

This Q3 2024 threat report describes multiple active and emerging cyber threats: a new APT (CloudSorcerer) using cloud APIs and GitHub for C2, ongoing campaigns by groups like BlindEagle and Tropic Trooper, hacktivist activity linking Twelve and BlackJack, diverse ransomware operations (SEXi, Key Group, Mallox), macOS and cross-platform backdoors (HZ Rat, Loki), infostealer/clipper campaigns under “Tusk”, and targeted RAT campaigns (SambaSpy) — collectively demonstrating cloud abuse, DLL side-loading, exploitation of WinRAR CVE-2023-38831, and widespread active exploitation against governments, enterprises and regional victims.