2024年全球高级持续性威胁APT研究报告.pdf (14 MB)

A 360 review of 2024 public APT activity counted more than 730 reports covering 124 groups, including 41 groups disclosed for the first time. The excerpt says state-linked intrusion activity tracked geopolitical competition and regional conflicts, with government, defense, information technology, education, finance, research, transportation, and military-industrial entities among the main targets. 360 also reported more than 1,300 APT attack events against Chinese organizations, with prominent activity attributed to groups from South Asia, Southeast Asia, East Asia, and North America. The report highlights continued use of zero-day and n-day exploitation, especially against browsers, operating systems, mobile platforms, and supply-chain software systems, as a strategic trend for state-linked operations.