{"id":22459,"date":"2022-12-26T06:35:03","date_gmt":"2022-12-26T06:35:03","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=22459"},"modified":"2026-04-17T18:07:42","modified_gmt":"2026-04-17T18:07:42","slug":"bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/","title":{"rendered":"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022)"},"content":{"rendered":"<!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body><p><\/p>\n\n\n\n<p>From December 5, 2022 to December 18, 2022, NSFOCUS Security Labs found activity clues of 66 APT groups, 3 malware families (MoonBounce Trojans, Razy Trojans and the CoinMinder), and 509 threat actors targeting critical infrastructure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">APT Groups<\/h2>\n\n\n\n<p>Among the 66 discovered APT groups, the APT28 affected the most significant number of hosts from December 5 to December 18, 2022.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Number-of-hosts-affected-by-APT-groups-from-December-5-through-December-18-2022.png\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"369\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Number-of-hosts-affected-by-APT-groups-from-December-5-through-December-18-2022-1024x369.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-22463\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Number-of-hosts-affected-by-APT-groups-from-December-5-through-December-18-2022-1024x369.png 1024w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Number-of-hosts-affected-by-APT-groups-from-December-5-through-December-18-2022-300x108.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Number-of-hosts-affected-by-APT-groups-from-December-5-through-December-18-2022-768x277.png 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Number-of-hosts-affected-by-APT-groups-from-December-5-through-December-18-2022-1536x554.png 1536w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Number-of-hosts-affected-by-APT-groups-from-December-5-through-December-18-2022-600x216.png 600w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Number-of-hosts-affected-by-APT-groups-from-December-5-through-December-18-2022.png 1685w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><figcaption>Number of hosts affected by APT groups from December 5, 2022 through December 18, 2022<\/figcaption><\/figure>\n\n\n\n<p><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture2.png\"><img decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture2.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-22467\" width=\"521\" height=\"314\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture2.png 749w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture2-300x181.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture2-600x362.png 600w\" sizes=\"(max-width: 521px) 100vw, 521px\" \/><\/a><figcaption>Industries affected by APT groups from December 5, 2022 through December 18, 2022<\/figcaption><\/figure>\n<\/div>\n\n\n<h2 class=\"wp-block-heading\"><strong>Threat Actors Targeting Critical Infrastructure<\/strong><\/h2>\n\n\n\n<p>A total of 509 threat actors targeting critical infrastructure remained active in this period.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture4.png\"><img decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture4.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-22469\" width=\"620\" height=\"374\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture4.png 749w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture4-300x181.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture4-600x362.png 600w\" sizes=\"(max-width: 620px) 100vw, 620px\" \/><\/a><figcaption>Distribution of activities by activity type from December 5, 2022 through December 18, 2022<\/figcaption><\/figure>\n<\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture3.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture3.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-22471\" width=\"689\" height=\"415\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture3.png 750w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture3-300x181.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/Picture3-600x362.png 600w\" sizes=\"(max-width: 689px) 100vw, 689px\" \/><\/a><figcaption>Number of threat actors by target industry from December 5, 2022 through December 18, 2022<\/figcaption><\/figure>\n<\/div>\n\n\n<h2 class=\"wp-block-heading\"><strong>Knowledge Graphs of Highlighted APT Groups<\/strong><\/h2>\n\n\n\n<p class=\"has-vivid-cyan-blue-color has-text-color\"><strong>APT28<\/strong><\/p>\n\n\n\n<p><strong>First Discovery Time:<\/strong> 2020-11-13 07:38:40<\/p>\n\n\n\n<p><strong>Description:<\/strong> APT28 is a famous cyber espionage group. Some researchers believe this organization belongs to the GRU of the&nbsp;Russian&nbsp;Federation. APT 28 is also known as Sofacy Group and STRONGIUM, and its main targets are aviation, national defense, government agencies and international organizations.<\/p>\n\n\n\n<p><strong>Geolocation of Threat Actor:<\/strong> Russia&Acirc;&nbsp;<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/5-3.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/5-3.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-22473\" width=\"503\" height=\"306\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/5-3.png 941w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/5-3-300x183.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/5-3-768x468.png 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/5-3-600x365.png 600w\" sizes=\"(max-width: 503px) 100vw, 503px\" \/><\/a><figcaption>Diamond model of the APT28 (Dec 5 &#8211; 18, 2022)<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"has-vivid-cyan-blue-color has-text-color\"><strong>ScarCruft<\/strong><\/p>\n\n\n\n<p><strong>First Discovery Time:<\/strong> 2018-12-10 16:00:00<\/p>\n\n\n\n<p><strong>Description:<\/strong> ScarCruft is a relatively new APT group; victims have been observed in several countries, including Russia, Nepal, South Korea, India, Kuwait and Romania. The group used to use spear phishing attacks to gain profits. ScarCruft has exploited multiple vulnerabilities, including zero-day vulnerability (CVE-2016-0147) exploitation for attacks on Adobe Flash and Microsoft Internet Explorer.<\/p>\n\n\n\n<p><strong>Geolocation of Threat Actor:<\/strong> North Korea&Acirc;&nbsp;<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/6-2.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/6-2.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-22475\" width=\"496\" height=\"311\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/6-2.png 874w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/6-2-300x188.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/6-2-768x482.png 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/6-2-600x377.png 600w\" sizes=\"(max-width: 496px) 100vw, 496px\" \/><\/a><figcaption>Diamond model of the APT group ScarCruft (Dec 5 &#8211; 18, 2022)<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"has-vivid-cyan-blue-color has-text-color\"><strong>SideWinder<\/strong><\/p>\n\n\n\n<p><strong>First Discovery Time:<\/strong> 2020-02-12 03:10:54<\/p>\n\n\n\n<p><strong>Description:<\/strong> An actor mainly targeting Pakistan military targets, active since at least 2012.<\/p>\n\n\n\n<p><strong>Geolocation of Threat Actor:<\/strong> India&Acirc;&nbsp;<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/7-2.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/7-2.png\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-22477\" width=\"516\" height=\"309\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/7-2.png 873w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/7-2-300x180.png 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/7-2-768x460.png 768w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/7-2-600x359.png 600w\" sizes=\"(max-width: 516px) 100vw, 516px\" \/><\/a><figcaption>Diamond model of the APT group SideWinder (Dec 5 &#8211; 18, 2022)<\/figcaption><\/figure>\n<\/div>\n\n\n<p><strong>About NSFOCUS Security Labs<\/strong><\/p>\n\n\n\n<p>NSFOCUS Security Labs (NSL) is an internationally-recognized cybersecurity research and threat response center at the forefront of vulnerability assessment, threat hunting and mitigation research.<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"<p>From December 5, 2022 to December 18, 2022, NSFOCUS Security Labs found activity clues of 66 APT groups, 3 malware families (MoonBounce Trojans, Razy Trojans and the CoinMinder), and 509 threat actors targeting critical infrastructure. APT Groups Among the 66 discovered APT groups, the APT28 affected the most significant number of hosts from December 5 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":22425,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"categories":[3],"tags":[94],"class_list":["post-22459","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-apt-group"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022) - NSFOCUS<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022) - NSFOCUS\" \/>\n<meta property=\"og:description\" content=\"From December 5, 2022 to December 18, 2022, NSFOCUS Security Labs found activity clues of 66 APT groups, 3 malware families (MoonBounce Trojans, Razy\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/\" \/>\n<meta property=\"og:site_name\" content=\"NSFOCUS\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-26T06:35:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-17T18:07:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/breadcrumbs.png\" \/>\n<meta name=\"author\" content=\"NSFOCUS\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022) - NSFOCUS\" \/>\n<meta name=\"twitter:description\" content=\"From December 5, 2022 to December 18, 2022, NSFOCUS Security Labs found activity clues of 66 APT groups, 3 malware families (MoonBounce Trojans, Razy\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/breadcrumbs.png\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"NSFOCUS\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/\"},\"author\":{\"name\":\"NSFOCUS\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\"},\"headline\":\"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022)\",\"datePublished\":\"2022-12-26T06:35:03+00:00\",\"dateModified\":\"2026-04-17T18:07:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/\"},\"wordCount\":325,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/breadcrumbs.png\",\"keywords\":[\"APT Group;\"],\"articleSection\":[\"Blog\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/\",\"name\":\"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022) - NSFOCUS\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/breadcrumbs.png\",\"datePublished\":\"2022-12-26T06:35:03+00:00\",\"dateModified\":\"2026-04-17T18:07:42+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/breadcrumbs.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2022\\\/12\\\/breadcrumbs.png\",\"width\":399,\"height\":241,\"caption\":\"Breadcrumb trail on a dirt path.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nsfocusglobal.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#website\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/\",\"name\":\"NSFOCUS\",\"description\":\"Security Made Smart and Simple\",\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nsfocusglobal.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#organization\",\"name\":\"NSFOCUS\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"width\":248,\"height\":36,\"caption\":\"NSFOCUS\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\",\"name\":\"NSFOCUS\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"caption\":\"NSFOCUS\"},\"sameAs\":[\"https:\\\/\\\/nsfocusglobal.com\"],\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022) - NSFOCUS","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/","og_locale":"pt_BR","og_type":"article","og_title":"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022) - NSFOCUS","og_description":"From December 5, 2022 to December 18, 2022, NSFOCUS Security Labs found activity clues of 66 APT groups, 3 malware families (MoonBounce Trojans, Razy","og_url":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/","og_site_name":"NSFOCUS","article_published_time":"2022-12-26T06:35:03+00:00","article_modified_time":"2026-04-17T18:07:42+00:00","og_image":[{"url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/breadcrumbs.png","type":"","width":"","height":""}],"author":"NSFOCUS","twitter_card":"summary_large_image","twitter_title":"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022) - NSFOCUS","twitter_description":"From December 5, 2022 to December 18, 2022, NSFOCUS Security Labs found activity clues of 66 APT groups, 3 malware families (MoonBounce Trojans, Razy","twitter_image":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/breadcrumbs.png","twitter_misc":{"Escrito por":"NSFOCUS","Est. tempo de leitura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/#article","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/"},"author":{"name":"NSFOCUS","@id":"https:\/\/nsfocusglobal.com\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d"},"headline":"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022)","datePublished":"2022-12-26T06:35:03+00:00","dateModified":"2026-04-17T18:07:42+00:00","mainEntityOfPage":{"@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/"},"wordCount":325,"commentCount":0,"publisher":{"@id":"https:\/\/nsfocusglobal.com\/#organization"},"image":{"@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/breadcrumbs.png","keywords":["APT Group;"],"articleSection":["Blog"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/","url":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/","name":"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022) - NSFOCUS","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/#primaryimage"},"image":{"@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/breadcrumbs.png","datePublished":"2022-12-26T06:35:03+00:00","dateModified":"2026-04-17T18:07:42+00:00","breadcrumb":{"@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/#primaryimage","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/breadcrumbs.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2022\/12\/breadcrumbs.png","width":399,"height":241,"caption":"Breadcrumb trail on a dirt path."},{"@type":"BreadcrumbList","@id":"https:\/\/nsfocusglobal.com\/bread-crumbs-of-threat-actors-dec-5-2022-dec-18-2022\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nsfocusglobal.com\/"},{"@type":"ListItem","position":2,"name":"Bread Crumbs of Threat Actors (Dec 5, 2022 \u2013 Dec 18, 2022)"}]},{"@type":"WebSite","@id":"https:\/\/nsfocusglobal.com\/#website","url":"https:\/\/nsfocusglobal.com\/","name":"NSFOCUS","description":"Security Made Smart and Simple","publisher":{"@id":"https:\/\/nsfocusglobal.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nsfocusglobal.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/nsfocusglobal.com\/#organization","name":"NSFOCUS","url":"https:\/\/nsfocusglobal.com\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/#\/schema\/logo\/image\/","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","width":248,"height":36,"caption":"NSFOCUS"},"image":{"@id":"https:\/\/nsfocusglobal.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/nsfocusglobal.com\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d","name":"NSFOCUS","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","caption":"NSFOCUS"},"sameAs":["https:\/\/nsfocusglobal.com"],"url":"https:\/\/nsfocusglobal.com\/pt-br\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/22459","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/comments?post=22459"}],"version-history":[{"count":0,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/22459\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media\/22425"}],"wp:attachment":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media?parent=22459"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/categories?post=22459"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/tags?post=22459"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}