APT Topic Summary Report: Cisco Talos Year in Review 2022

State-sponsored or state-aligned advanced persistent threats (APTs) adapted to the changing geopolitical landscape in 2022. Cisco Talos observed several offensive cyber campaigns linked to several groups stemming from Russia, Iran, China, North Korea, and countries in the Indian subcontinent. These groups engaged in a variety of malicious activities, including espionage, intellectual property theft, and deploying destructive malware. Major trends observed include:

• Delivering new, custom malware and updated variants of previously known malware.


• Exploiting publicly known vulnerabilities, such as Log4j utilities. …

advanced advanced persistent threats apt apts campaigns changing china cisco cisco talos countries cyber espionage geopolitical intellectual property intellectual property theft iran korea major malicious malware north north korea offensive persistent persistent threats report review russia sponsored state talos theft threats trends year in review