ESET Report Details APT Activities and Sandworm Attacks in Q2-Q3 2025
ESET has released its latest APT Activity Report, covering cyber-operations by state-aligned hacking groups from April to September 2025. The report, highlighted by ESET Chief Security Evangelist Tony Anscombe, analyzes the tactics, targets, and motivations of notorious advanced persistent threat (APT) actors. These groups targeted entities across various sectors and geographies, aiming to infiltrate government and corporate systems to steal intelligence, disrupt infrastructure, or generate revenue. A significant finding involves the Russia-aligned group Sandworm, which deployed data wipers against Ukraine's grain sector. This attack is interpreted as a strategic move to harm the Ukrainian economy beyond immediate operational disruption. The report provides critical context on how these cyber-operations evolve and impact global security landscapes. By documenting these activities, ESET aims to help organizations understand the current threat environment and improve their defensive postures against sophisticated state-sponsored attacks. The full report offers detailed insights into the specific methods used by these actors, emphasizing the ongoing risks posed by geopolitical conflicts in the digital realm.
Wire timeline
ESET Report Details APT Activities and Sandworm Attacks in Q2-Q3 2025
ESET has released its latest APT Activity Report, covering cyber-operations by state-aligned hacking groups from April to September 2025. The report, highlighted by ESET Chief Security Evangelist Tony Anscombe, analyzes the tactics, targets, and motivations of notorious advanced persistent threat (APT) actors. These groups targeted entities across various sectors and geographies, aiming to infiltrate government and corporate systems to steal intelligence, disrupt infrastructure, or generate revenue. A significant finding involves the Russia-aligned group Sandworm, which deployed data wipers against Ukraine's grain sector. This attack is interpreted as a strategic move to harm the Ukrainian economy beyond immediate operational disruption. The report provides critical context on how these cyber-operations evolve and impact global security landscapes. By documenting these activities, ESET aims to help organizations understand the current threat environment and improve their defensive postures against sophisticated state-sponsored attacks. The full report offers detailed insights into the specific methods used by these actors, emphasizing the ongoing risks posed by geopolitical conflicts in the digital realm.
WeLiveSecurity