State-sponsored cyberattacks from N. Korea, China, Russia rise 7.5% in 1st half of 2026
Cyberattacks orchestrated by state-sponsored hacking groups from North Korea, China and Russia increased by 7.5 percent in the first half of this year, driven primarily by a sharp surge in early-year activity. According to a threat intelligence report by cybersecurity firm S2W, there were global Advanced Persistent Threat incidents between January and June, up from 147 in the preceding six…
State-sponsored cyberattacks originating from North Korea, China, and Russia surged by 7.5 percent during the first half of 2026, according to a cybersecurity firm's threat intelligence report. The report revealed a notable rise in Advanced Persistent Threat incidents, totaling 171 between January and June, compared to 147 incidents during the previous six-month period.
The surge in cyberattacks was largely concentrated in the first quarter of 2026, indicating heightened digital assaults from the North Korean and Russian hacking groups. North Korea emerged as the world's most active state-backed threat actor, responsible for 99 incidents, marking a 13.8 percent increase compared to the previous six-month period. The majority of these attacks were directed at South Korea, with 19 recorded incidents, followed by eight targeted attacks on the United States.
To circumvent security measures, North Korean threat actors increasingly utilized advanced tools, incorporating generative artificial intelligence (AI), deepfakes, compromised code repositories, and fraudulent job recruitment schemes. These sophisticated tactics were primarily focused on infiltrating critical systems and networks.
Written by urgent.news from The Korea Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
