[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-182239-105":3,"detail-sidebar-cat-0-en-105":81,"doc-detail-182239-en":131},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","eset-apt-activity-report-q2-2024-q3-2024","ESET APT Activity Report Q2 2024-Q3 2024","","This report from ESET details significant Advanced Persistent Threat (APT) activities observed during the second and third quarters of 2024. It highlights findings related to Russia-aligned threat groups, an increase in XSS spearphishing attacks targeting Zimbra and Roundcube, and ongoing activities connected to the Russia-Ukraine war. The document also identifies specific threats such as FrostyNeighbor, the use of Linux toolsets in Yemen, and a vulnerability in WPS Office for Windows attributed to APT-C-60. ESET's research aims to provide cybersecurity professionals and organizations with critical intelligence to understand and mitigate evolving cyber threats. The report includes an overview of ESET's contributions to cybersecurity research and threat intelligence. This document is essential for stakeholders seeking to stay informed about the current landscape of sophisticated cyber attacks and the actors behind them.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/eset-apt-activity-report-q2-2024-q3-2024/182239/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/eset-apt-activity-report-q2-2024-q3-2024/182239.png","ImageObject",300,407,{"name":42,"@type":43},"Aditya","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-27","2026-09-02",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",18,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What are the key findings of the ESET APT Activity Report for Q2-Q3 2024?","Question",{"text":63,"@type":64},"The report highlights activities of Russia-aligned groups, increased XSS spearphishing attacks, and specific threats like FrostyNeighbor and a WPS Office vulnerability.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"What specific types of attacks were observed?",{"text":68,"@type":64},"The report details an increase in XSS spearphishing attacks against Zimbra and Roundcube, the use of Linux toolsets in Yemen, and the exploitation of a WPS Office for Windows vulnerability by APT-C-60.",{"name":70,"@type":61,"acceptedAnswer":71},"What is the significance of the Russia-Ukraine war in this report?",{"text":72,"@type":64},"The Russia-Ukraine war is noted as a context for ongoing APT activities, indicating its continued influence on the cyber threat landscape.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},182239,1788347763,{"code":4,"msg":82,"data":83},"success",[84,88,92,96,101,106,111,115,120,123,127],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":89,"show_sort_weight":90,"slug":91},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":93,"show_sort_weight":94,"slug":95},"Exam",70,"exam",{"id":97,"doc_module":4,"doc_module_name":25,"category_name":98,"show_sort_weight":99,"slug":100},5,"Comic",60,"comic",{"id":102,"doc_module":4,"doc_module_name":25,"category_name":103,"show_sort_weight":104,"slug":105},6,"Technology",50,"technology",{"id":107,"doc_module":4,"doc_module_name":25,"category_name":108,"show_sort_weight":109,"slug":110},7,"Healthcare",40,"healthcare",{"id":112,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":113,"slug":114},8,30,"research-report",{"id":116,"doc_module":4,"doc_module_name":25,"category_name":117,"show_sort_weight":118,"slug":119},9,"Religion & Spirituality",20,"religion-spirituality",{"id":118,"doc_module":4,"doc_module_name":25,"category_name":121,"show_sort_weight":118,"slug":122},"World Cup","world-cup",{"id":124,"doc_module":4,"doc_module_name":25,"category_name":125,"show_sort_weight":124,"slug":126},10,"Lifestyle","lifestyle",{"id":128,"doc_module":4,"doc_module_name":25,"category_name":129,"show_sort_weight":97,"slug":130},19,"General","general",{"code":4,"msg":82,"data":132},{"doc_id":79,"user_id":133,"nickname":42,"user_avatar":134,"doc_module":4,"category_id":112,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":140,"language":141,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":142,"faqs":143,"seo_title":144,"seo_description":12,"update_tm":80,"read_time":99,"preview_page_count":4},962085564549,"https://ap-avatar.wpscdn.com/davatar_085a072bc5b1113ac321206ff7593b45","| Russia-aligned groups | 17 |\n| --- | --- |\n| An increase in XSS spearphishing attacks against Zimbra and Roundcube | 18 |\n| Russia-Ukraine war | 19 |\n| Other | 21 |\n| FrostyNeighbor | 22 |\n| Linux toolset in Yemen | 23 |\n| WPS Office for Windows vulnerability – APT-C-60 | 23 |\n| About ESET | 24 |","cbCaip2KJPDW6tuN","https://ap.wps.com/l/cbCaip2KJPDW6tuN","pdf",1492160,24,"English","# ESET APT Activity Report Q2 2024-Q3 2024\n## Russia-aligned groups\n## An increase in XSS spearphishing attacks against Zimbra and Roundcube\n## Russia-Ukraine war\n## Other\n## FrostyNeighbor\n## Linux toolset in Yemen\n## WPS Office for Windows vulnerability – APT-C-60\n## About ESET","[{\"question\":\"What are the key findings of the ESET APT Activity Report for Q2-Q3 2024?\",\"answer\":\"The report highlights activities of Russia-aligned groups, increased XSS spearphishing attacks, and specific threats like FrostyNeighbor and a WPS Office vulnerability.\"},{\"question\":\"What specific types of attacks were observed?\",\"answer\":\"The report details an increase in XSS spearphishing attacks against Zimbra and Roundcube, the use of Linux toolsets in Yemen, and the exploitation of a WPS Office for Windows vulnerability by APT-C-60.\"},{\"question\":\"What is the significance of the Russia-Ukraine war in this report?\",\"answer\":\"The Russia-Ukraine war is noted as a context for ongoing APT activities, indicating its continued influence on the cyber threat landscape.\"}]","ESET APT Activity Report Q2 2024-Q3 2024 | PDF"]