ESET APT Activity Report Q2–Q3 2023

ESET's APT Activity Report Q2–Q3 2023 reviews observed nation-state and aligned threat actor activity from April through September 2023, documenting exploitation of multiple known vulnerabilities (affecting WinRAR, Roundcube, Zimbra, Outlook, Exchange/IIS, Proself, Adobe ColdFusion) to conduct espionage, data theft, and sabotage across governments and critical organizations; it highlights active campaigns, newly observed China-aligned groups, redeveloped data-collection tools, and destructive wipers (RoarBat, NikoWiper, SharpNikoWiper) used primarily in Ukraine.