Keypoints :

• APT groups showcased increasingly sophisticated techniques across a range of cyber threats in Q4 2024.
• Iranian actors demonstrated advancements in cyber espionage and disruptive operations.
• Russian state-sponsored actors targeted Europe, Central Asia, and the U.S. with credential theft and disruptive tactics.
• Chinese APT groups intensified their espionage activities in Southeast Asia, Taiwan, and Japan.
• North Korean groups advanced ransomware operations, leveraging fake job opportunities for infiltration.
• The increased focus on credential theft and exploitation of zero-day vulnerabilities were notable trends.
• Cloud services became prime targets for APT exploitation.
• Psychological operations and influence campaigns were heightened, particularly by Iranian groups.
• The report underscores the need for proactive cybersecurity strategies and continuous security updates.