卡巴斯基：2023年下半年针对工业组织的APT和金融攻击概述报告（英文版）（31页）.pdf

1、 APT and financial attacks on industrial organizations in H2 2023 02.04.2024 Version 1.0 APT AND FINANCIAL ATTACKS ON INDUSTRIAL ORGANIZATIONS IN H2 2023 1 2024 AO KASPERSKY LAB Korean-speaking activity.3 Lazarus attacks.3 ampaign targeted the defense industry and nuclear engineers.3 Attacks with Li

2、ghtlessCan backdoor.4 Operation Blacksmith.4 Attack on a Russian missile engineering company.5 Andariel attacks.5 Attacks on defense contractors with the use of updated MATA framework.6 Middle East-related activity.7 Dark Caracal attacks.7 Ballistic Bobcat/Charming Kitten attacks.7 Imperial Kitten/Y

3、ellow Liderc/Tortoiseshell attacks.8 OilRig attacks.8 Peach Sandstorm/APT33 attacks.9 Chinese-speaking activity.9 TEMP.Hex and UNC4698 USB attacks.9 Space Pirates attacks.9 APT31 attacks.10 UNC4841 attacks.11 Flax Typhoon attacks.11 Volt Typhoon attacks.11 Redfly attacks.12 Attacks on semiconductor

4、companies in East Asia.13 Russian-speaking activity.13 Attacks with DroxiDat/SystemBC.13 APT29/Midnight Blizzard/Nobelium attacks.13 Attacks exploiting WinRAR vulnerability.15 Sandworm attacks.15 APT28 attacks.15 Mysterious Werewolf.16 Other APT28/Fancy Bear attacks.16 Other Sandworm/Hades attacks.1

5、7 APT AND FINANCIAL ATTACKS ON INDUSTRIAL ORGANIZATIONS IN H2 2023 2 2024 AO KASPERSKY LAB Other.18 RedEnergy attacks.18 QR code phishing campaign.19 Mysterious Team Bangladesh attacks.19 Cuba ransomware attacks.19 Core Werewolf attacks.20 Attacks on Russian industrial organizations.20 XDSpy attacks

6、.21 DarkWatchman RAT attacks.21 Hellhounds attacks.22 Cloud Atlas attacks.23 Grayling attacks.23 Attack against Danish critical infrastructure.24 AeroBlade attacks.24 USB attacks with Vetta Loader.25 CISA alerts.25 CISA advisory on CVE-2022-47966 and CVE-2022-42475.25 CISA advisory on Snatch Ransomw