#### `December Threat Reports`
| Date | Source | Threat(s) | URL |
| --- | --- | --- | --- |
| 2 December | PWC | Blue Callisto orbits around US Laboratories in 2022 | [pwc.com](https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/blue-callisto-orbits-around-us.html) |
| 5 December | Recorded Future | Exposing TAG-53’s Credential Harvesting Infrastructure Used for Russia-Aligned Espionage Operations | [recordedfuture.com](https://www.recordedfuture.com/exposing-tag-53-credential-harvesting-infrastructure-for-russia-aligned-espionage-operations) |
| 5 December | Sekoia | Calisto show interests into entities involved in Ukraine war support | [sekoia.com](https://blog.sekoia.io/calisto-show-interests-into-entities-involved-in-ukraine-war-support/) |
| 8 December | CERT-UA | Cyber attack on government organizations using the theme of Iranian Shahed-136 kamikaze drones and DolphinCape malware (CERT-UA#5683) | [cert.gov.ua](https://cert.gov.ua/article/3192088) |
| 10 December | Mandiant | Trojanized Windows 10 Operating System Installers Targeted Ukrainian Government | [mandiant.com](https://www.mandiant.com/resources/blog/trojanized-windows-installers-ukrainian-government) |
| 12 December | Carnegie Endowment | Cyber Operations in Ukraine: Russia’s Unmet Expectations | [carnegieendowment.org](https://carnegieendowment.org/2022/12/12/cyber-operations-in-ukraine-russia-s-unmet-expectations-pub-88607) |
| 16 December | Carnegie Endowment | Russia’s Wartime Cyber Operations in Ukraine: Military Impacts, Influences, and Implications | [carnegieendowment.org](https://carnegieendowment.org/2022/12/16/russia-s-wartime-cyber-operations-in-ukraine-military-impacts-influences-and-implications-pub-88657) |
| 18 December | CERT-UA | Cyber attack on DELTA system users using RomCom/FateGrab/StealDeal malware (CERT-UA#5709) | [cert.gov.ua](https://cert.gov.ua/article/3349703) |
| 19 December | Carnegie Endowment  | What the Russian Invasion Reveals About the Future of Cyber Warfare | [carnegieendowment.org](https://carnegieendowment.org/2022/12/19/what-russian-invasion-reveals-about-future-of-cyber-warfare-pub-88667) |
| 20 December | Unit42 | Russia’s Trident Ursa (aka Gamaredon APT) Cyber Conflict Operations Unwavering Since Invasion of Ukraine| [unti42.paloaltonetworks.com](https://unit42.paloaltonetworks.com/trident-ursa/) |
| 26 December | Telegraph | German double agent ‘passed Ukraine intelligence to Russia’ | [telegraph.co.uk](https://www.telegraph.co.uk/world-news/2022/12/26/german-double-agent-passed-uk) |
| 30 December | Ukrainian Govt | CERT-UA has processed over 2,000 cyberattacks against Ukraine year to date| [cip.gov.ua](https://cip.gov.ua/en/news/cert-ua-vid-pochatku-roku-opracyuvala-bilshe-dvokh-tisyach-kiberatak-na-ukrayinu) |