Cyber Threats Semester Report January to June 2023

This document is a Cyber Threats Semester Report covering the period from January to June 2023. It provides a technical analysis of various cyber threats as identified by the Gatewatcher Purple Team. The report outlines the ranking of the most utilized malware by cyber attackers, noting that Emotet has been displaced from the top three due to changes in Microsoft Office, with Qbot now leading. It details the most active threat actors and their tactics, particularly focusing on supply chain attacks exemplified by incidents involving PyPI/W4SP, 3CX, MOVEit, and the Russian Turla group. The report also discusses the types of files exploited by attackers, highlighting the dominance of Windows binaries and the rise of portable executable files. Additionally, it identifies sectors particularly targeted by cyber threats, with education ranking third. The report includes a summary of leaked identifiers and emphasizes the importance of continuous monitoring and analysis of cyber threats.