Advanced Persistent Threat Operations

30 reports

Advanced Persistent Threat Operations Russia Global United Kingdom [+7] United States Russia Infrastructure Attacks DNS Hijacking Persistent Network Infiltration Living-off-the-Land Exploitation Infrastructure Hijacking

Justice Department Disrupts Russian APT28 DNS Hijacking Network Targeting Microsoft Authentication Systems

Court-authorized operation neutralizes GRU military intelligence infrastructure exploiting consumer routers for credential theft
Advanced Persistent Threat Operations Iran Israel Iran [+2] Cyber Espionage Defense Procurement Fraud

Iranian Handala Group Breaches Israeli Defense Contractor in Escalating Cyber Campaign

Pro-Iran hackers target PSK Wind Technologies, developer of critical air defense command and control systems
Advanced Persistent Threat Operations North Korea Global United States [+5] North Korea Identity Spoofing Asset Recruitment Cryptocurrency Theft AI-Enhanced Social Engineering

North Korean Kimsuky Group Executes $285 Million Cryptocurrency Theft Through Extended Social Engineering Campaign

DPRK Intelligence Operatives Conduct Six-Month Targeted Operation Against Drift Platform Using Sophisticated Identity Deception
Advanced Persistent Threat Operations China Canada European Union [+6] United States China Cyber Espionage Government Infiltration Supply Chain Exploitation Telecommunications Infiltration

Chinese Government Conducts Massive Cyber Espionage Campaign Against U.S. Government Personnel

Salt Typhoon operation breaches multiple agencies and private sector targets in extensive intelligence gathering
Advanced Persistent Threat Operations Russia Global United States [+2] Russia Zero-Day Exploitation

Russian TA446 Group Deploys Leaked DarkSword iOS Exploit Kit in Targeted Campaign

Russia-linked actors leverage recently disclosed iOS vulnerabilities in sophisticated spear-phishing operations
Advanced Persistent Threat Operations China Global China [+3] Cyber Espionage Malware Distribution Military Espionage

China-Linked Hackers Conducted Multi-Year Espionage Campaign Against Southeast Asian Military Organizations

Custom malware tools targeted intelligence on military capabilities and Western defense partnerships
Advanced Persistent Threat Operations Russia Romania Slovakia [+7] Ukraine United States Russia Cyber Espionage Malware Distribution Zero-Day Exploitation RTF Weaponization

Russian APT28 Deploys New Exploit Against Eastern European Targets

Operation Neusploit leverages CVE-2026-21509 vulnerability in coordinated campaign across Ukraine, Slovakia, and Romania
Advanced Persistent Threat Operations China Unknown Global [+4] Multiple China Cyber Espionage Critical Infrastructure Mapping

State Actor Launches Shadow Campaigns Global Espionage Operation Across 155 Countries

Massive international intelligence collection effort targets government and commercial entities worldwide
Advanced Persistent Threat Operations China Singapore China [+2] Persistent Network Infiltration Telecommunications Infiltration

Singapore Executes Largest Cyber Operation to Remove APT Actor from National Telecommunications Infrastructure

Operation Cyber Guardian targets advanced persistent threat group embedded in four major telecom networks
Advanced Persistent Threat Operations China Argentina Australia [+22] Bangladesh Brazil Canada Germany Indonesia Japan Malaysia Mexico Myanmar New Zealand Philippines South Africa Thailand United Kingdom United States China Cyber Espionage Infrastructure Attacks Communications Interception Persistent Network Infiltration Telecommunications Infiltration Wiretapping System Compromise

Chinese Salt Typhoon Campaign Breaches Over 200 Companies Across 80 Countries

MSS-linked hackers maintained years-long access to telecommunications infrastructure and law enforcement wiretapping systems
Advanced Persistent Threat Operations China North Korea Russia [+12] Allied Nations Global South Korea United States China Cyber Espionage Defense Procurement Fraud Social Media Monitoring Ransomware Campaigns Critical Infrastructure Mapping APT Collaboration Model Cryptocurrency Platform Targeting

East Asian State-Backed Cyber Groups Intensify Espionage and Ransomware Operations in 2025

Chinese state-sponsored actors lead unprecedented surge in global network infiltration and data theft campaigns
Advanced Persistent Threat Operations China Unidentified State Actor 155 countries globally [+12] Bolivia Brazil European Union Global Mexico United States China Cyber Espionage Government Infiltration Persistent Network Infiltration Living-off-the-Land Exploitation Critical Infrastructure Mapping

Chinese Espionage Unit Compromised Government Systems Across 37 Countries

Shadow Campaigns operation targeted law enforcement, border control, and financial agencies in global reconnaissance effort
Advanced Persistent Threat Operations Unknown Global Other [+2] Cyber Espionage AI-Autonomous Cyber Operations

First AI-Orchestrated Cyber Espionage Campaign Documented in Historic GTG-1002 Operation

Anthropic reports breakthrough case of artificial intelligence autonomously conducting sophisticated cyber operations
Advanced Persistent Threat Operations China Global China [+4] Government Infiltration Coordinated Cyber Warfare Telecommunications Infiltration APT Collaboration Model

Chinese APT Groups Pioneer Collaborative Network Access Model

Earth Estries and Earth Naga demonstrate shared infiltration tactics targeting government and telecom infrastructure
Advanced Persistent Threat Operations China NATO Members China [+2] Cyber Espionage Influence Operations

Chinese Intelligence Services Intensify Collection Operations Against NATO Summit

Ministry of State Security groups likely targeting 2025 NATO gathering with cyber and influence tactics
Advanced Persistent Threat Operations China Canada Germany [+7] Japan United Kingdom United States China Cyber Espionage AI-Enhanced Social Engineering AI-Autonomous Cyber Operations

Chinese Hackers Deploy AI-Orchestrated Cyber Espionage in Historic Campaign

State-sponsored group GTG-1002 used Claude AI to autonomously conduct attacks against 30 organizations
Advanced Persistent Threat Operations China United States China [+3] Economic Coercion Document Forgery Deceptive Job Recruitment

Chinese State-Sponsored APT41 Hackers Target U.S. Trade Officials During 2025 Policy Negotiations

Advanced cyber espionage campaign compromises trade policy stakeholders through sophisticated social engineering and document weaponization during critical diplomatic negotiations
Advanced Persistent Threat Operations China Australia Canada [+5] New Zealand United Kingdom United States China Cyber Espionage

Chinese Firms Accused of Supporting Beijing Intelligence Services in Global Cyber Campaign

US and Five Eyes allies target three Chinese companies for enabling state-sponsored espionage operations
Advanced Persistent Threat Operations North Korea United States Western Europe [+3] North Korea Cyber Espionage Vulnerability Scanning

North Korean Kimsuky Group Maintains Global Reconnaissance Operations Against Western Institutions

Unprecedented visibility into systematic espionage targeting reveals scope of intelligence gathering campaign
Advanced Persistent Threat Operations China Australia United States [+3] China Zero-Day Exploitation Critical Infrastructure Mapping

Chinese State Cyber Groups Target Critical Infrastructure Through SharePoint Vulnerability Chain

Linen Typhoon and Violet Typhoon exploit Microsoft systems in coordinated espionage campaign
Advanced Persistent Threat Operations China Japan South Korea [+5] Taiwan China Cyber Espionage Coordinated Cyber Warfare Industrial Sabotage

Chinese State-Backed Groups Target East Asian Semiconductor Manufacturers in Coordinated Campaign

Cyber espionage operations focus on aerospace, defense, and critical technology sectors across the region
Advanced Persistent Threat Operations North Korea South Korea United States [+4] North Korea Cyber Espionage Identity Spoofing QR Code Phishing

North Korean Kimsuky Group Deploys QR Code Phishing Against Western Institutions

FBI warns of sophisticated credential theft campaign targeting think tanks and government entities
Advanced Persistent Threat Operations Russia Poland Russia [+2] Election Interference Cyber Espionage

Russia Doubles Intelligence Activity Against Poland Ahead of Presidential Election

Cyberattacks target ruling party systems as GRU operations reach unprecedented levels
Advanced Persistent Threat Operations North Korea Global South Korea [+5] United States North Korea Government Infiltration Vulnerability Demonstration RDP Exploitation

North Korean Kimsuky Group Exploits Windows RDP Vulnerabilities in Think Tank Campaign

AhnLab identifies sophisticated attack chain targeting government organizations and research institutions
Advanced Persistent Threat Operations North Korea Multiple Western Nations North Korea [+1] Cyber Espionage

Global Cyber Alliance Documents North Korean Kimsuky Reconnaissance Operations Through AIDE Network

Unprecedented visibility reveals systematic espionage targeting Western institutions
Advanced Persistent Threat Operations China Multiple China [+2] Cyber Espionage Critical Infrastructure Mapping

Chinese Cyber Espionage Operations Surge 150% in 2024 According to Strategic Assessment

Attacks against financial, media, manufacturing, and industrial sectors demonstrate unprecedented escalation in state-sponsored cyber activities
Advanced Persistent Threat Operations China United States China [+2] Cyber Espionage Telecommunications Infiltration

Treasury Sanctions Chinese Firm and Hacker Behind Salt Typhoon Telecom Breaches

Sichuan Juxinhe Network Technology and Shanghai-based operator targeted for compromising US telecommunications infrastructure
Advanced Persistent Threat Operations North Korea Australia Canada [+8] Multiple United Kingdom United States North Korea Cyber Espionage Academic Espionage Persistent Network Infiltration AI-Enhanced Social Engineering

North Korean Kimsuky Group Maintains Global Reconnaissance Operations Against Western Institutions Through AIDE Network

Global Cyber Alliance documents persistent espionage campaign targeting research and government organizations
Advanced Persistent Threat Operations China United States China [+9] Cyber Espionage Infrastructure Attacks Technology Transfer Malware Distribution Government Infiltration Military Espionage Persistent Network Infiltration Intelligence Exposure Critical Infrastructure Mapping

House Committee Documents 60 Chinese Espionage Cases Across Four Years

Updated threat assessment reveals expanding CCP intelligence operations targeting US military and commercial secrets
Advanced Persistent Threat Operations China Italy South Africa [+10] Thailand United Kingdom United States China Infrastructure Attacks Government Infiltration Persistent Network Infiltration Living-off-the-Land Exploitation Vulnerability Scanning Telecommunications Infiltration

Salt Typhoon Expands Campaign Against Telecom Infrastructure Across Five Nations

Chinese hackers target additional networks including US providers through Cisco router vulnerabilities
Select an article to read