In the second quarter of 2024, Kaspersky’s Global Research and Analysis Team (GReAT) observed notable changes in the activities of cyber threat actors. Some maintained their usual patterns, while others significantly updated their tools and broadened their activities. Kaspersky’s telemetry data revealed a surge in sophisticated cyberespionage campaigns, particularly targeting government, military, telecommunications, and judicial sectors. One key development was the exploitation of open-source threats, including the backdooring of XZ, a compression utility used in Linux distributions. Hacktivism also played a significant role, with groups like Homeland Justice launching damaging attacks. Additionally, attackers have updated their toolsets. APT campaigns impacted all regions globally, highlighting the widespread reach of these threats across Europe, the Americas, Asia, the Middle East, and Africa.
