ESET APT Activity Report Q2 2024–Q3 2024

ESET's APT Activity Report Q2–Q3 2024 provides an overview of notable nation-state–linked cyber operations observed from April to September 2024, documenting expanded targeting by China-aligned MirrorFace, widespread abuse of SoftEther VPN by multiple groups, webmail XSS exfiltration by Russia-aligned actors, North Korea–linked theft and cloud-service abuse, Iran-aligned espionage in geopolitically significant regions, and a WPS Office remote code execution exploit attributed to a South Korea–aligned group; the report highlights affected sectors including government, finance, telecoms, and transportation across multiple continents.