Advanced Persistent Threat Operations

20 reports

Advanced Persistent Threat Operations China Global China [+3] Cyber Espionage Malware Distribution Military Espionage

China-Linked Hackers Conducted Multi-Year Espionage Campaign Against Southeast Asian Military Organizations

Custom malware tools targeted intelligence on military capabilities and Western defense partnerships
Advanced Persistent Threat Operations China Global China [+4] Government Infiltration Coordinated Cyber Warfare Telecommunications Infiltration APT Collaboration Model

Chinese APT Groups Pioneer Collaborative Network Access Model

Earth Estries and Earth Naga demonstrate shared infiltration tactics targeting government and telecom infrastructure
Advanced Persistent Threat Operations China Global China [+4] Cyber Espionage Government Infiltration Persistent Network Infiltration Critical Infrastructure Mapping

Chinese Espionage Unit Compromised Government Systems Across 37 Countries

Shadow Campaigns operation targeted law enforcement, border control, and financial agencies in global reconnaissance effort
Advanced Persistent Threat Operations China Argentina Australia [+22] Bangladesh Brazil Canada Germany Indonesia Japan Malaysia Mexico Myanmar New Zealand Philippines South Africa Thailand United Kingdom United States China Cyber Espionage Infrastructure Attacks Communications Interception Persistent Network Infiltration Telecommunications Infiltration Wiretapping System Compromise

Chinese Salt Typhoon Campaign Breaches Over 200 Companies Across 80 Countries

MSS-linked hackers maintained years-long access to telecommunications infrastructure and law enforcement wiretapping systems
Advanced Persistent Threat Operations China Canada Germany [+7] Japan United Kingdom United States China Cyber Espionage AI-Enhanced Social Engineering AI-Autonomous Cyber Operations

Chinese Hackers Deploy AI-Orchestrated Cyber Espionage in Historic Campaign

State-sponsored group GTG-1002 used Claude AI to autonomously conduct attacks against 30 organizations
Advanced Persistent Threat Operations China Japan South Korea [+5] Taiwan China Cyber Espionage Coordinated Cyber Warfare Industrial Sabotage

Chinese State-Backed Groups Target East Asian Semiconductor Manufacturers in Coordinated Campaign

Cyber espionage operations focus on aerospace, defense, and critical technology sectors across the region
Advanced Persistent Threat Operations China United States China [+6] Cyber Espionage Infrastructure Attacks Malware Distribution Government Infiltration Persistent Network Infiltration Critical Infrastructure Mapping

Chinese Brickstorm Campaign Maintains 393-Day Average Network Access to Critical Infrastructure

CISA warns state-sponsored group targets government and private sector organizations to reach downstream victims
Advanced Persistent Threat Operations Iran Global Israel [+4] Iran Cyber Espionage Transnational Repression Critical Infrastructure Mapping

Iranian APT Groups Conduct Systematic Surveillance Campaign Against Dissidents

Multiple Tehran-linked cyber units target critical infrastructure to locate regime opponents abroad
Advanced Persistent Threat Operations Iran Global Turkey [+2] Iran Coordinated Cyber Warfare

Iranian Muddy Water APT Executes Structured Middle East Cyber Campaign

Operation Olalampo demonstrates coordinated infrastructure sharing among Iranian-aligned threat actors
Advanced Persistent Threat Operations North Korea South Korea United States [+4] North Korea Cyber Espionage Identity Spoofing QR Code Phishing

North Korean Kimsuky Group Deploys QR Code Phishing Against Western Institutions

FBI warns of sophisticated credential theft campaign targeting think tanks and government entities
Advanced Persistent Threat Operations China United States China [+2] Cyber Espionage Telecommunications Infiltration

Treasury Sanctions Chinese Firm and Hacker Behind Salt Typhoon Telecom Breaches

Sichuan Juxinhe Network Technology and Shanghai-based operator targeted for compromising US telecommunications infrastructure
Advanced Persistent Threat Operations Russia Poland Russia [+2] Election Interference Cyber Espionage

Russia Doubles Intelligence Activity Against Poland Ahead of Presidential Election

Cyberattacks target ruling party systems as GRU operations reach unprecedented levels
Advanced Persistent Threat Operations North Korea Global South Korea [+5] United States North Korea Government Infiltration Vulnerability Demonstration RDP Exploitation

North Korean Kimsuky Group Exploits Windows RDP Vulnerabilities in Think Tank Campaign

AhnLab identifies sophisticated attack chain targeting government organizations and research institutions
Advanced Persistent Threat Operations China United States China [+5] Cyber Espionage Infrastructure Attacks Communications Interception Persistent Network Infiltration Telecommunications Infiltration

Chinese Salt Typhoon Hackers Breach Eight US Telecom Networks in Unprecedented Espionage Campaign

AT&T and Verizon Among Major Carriers Compromised as Beijing Targets Political Leaders and Intelligence Systems
Advanced Persistent Threat Operations China Global United States [+3] China Cyber Espionage Persistent Network Infiltration

Chinese Cyber Espionage Operations Surge 150% in 2024 According to CrowdStrike Analysis

Seven new China-nexus adversary groups identified as financial services and media sectors face intensified targeting
Advanced Persistent Threat Operations China United States China [+4] Cyber Espionage Infrastructure Attacks Government Infiltration Defense Procurement Fraud

Chinese APT-31 Group Maintains Persistent Campaign Against US Defense Infrastructure

MSS-linked hackers continue decade-long targeting of contractors and government officials
Advanced Persistent Threat Operations North Korea Global North Korea [+3] Malware Distribution Zero-Day Exploitation Persistent Network Infiltration

North Korean Hackers Exploit JetBrains TeamCity Flaw for Global Cyber Operations

Diamond Sleet and Onyx Sleet groups deploy malware through software development infrastructure
Advanced Persistent Threat Operations China Guam United States [+4] China Infrastructure Attacks Remote Device Control Criminal Botnet Weaponization

FBI Disrupts Chinese Volt Typhoon Botnet Targeting Critical Infrastructure Networks

Court-authorized operation removes malware from compromised routers used in multi-year espionage campaign
Advanced Persistent Threat Operations North Korea Various North Korea [+2] Identity Spoofing Malware Distribution

North Korean APT37 Disguises Malware as Password Files in Social Engineering Campaign

Operation demonstrates coordination between Pyongyang's cyber units and evolving deception tactics
Advanced Persistent Threat Operations North Korea Global United States [+5] North Korea Cyber Espionage Malware Distribution Supply Chain Exploitation Cryptocurrency Theft

North Korean APT Groups Target Blockchain Sector in Systematic Cryptocurrency Theft Campaign

Federal agencies detail tactics used by Lazarus Group and allied units since 2020
Select an article to read