State-sponsored cyberattacks from N. Korea, China, Russia rise 7.5% in 1st half of 2026
Cyberattacks orchestrated by state-sponsored hacking groups from North Korea, China and Russia increased by 7.5 percent in the first half of this year, driven primarily by a sharp surge in early-year activity. According to a threat intelligence report by cybersecurity firm S2W, there were global Advanced Persistent Threat incidents between January and June, up from 147 in the preceding six…
State-backed cyberattacks originating in North Korea, China and Russia surged by 7.5% during the first half of 2026, according to a cybersecurity analysis firm. The threat intelligence report revealed a prominent spike in early-year activity, with a total of 122 Advanced Persistent Threat incidents between January and June, compared to 147 in the previous six-month period.
This surge was chiefly observed in the first quarter, underscoring heightened digital aggressions emanating from Pyongyang and Moscow. North Korea emerged as the leading state-sponsored threat actor globally, responsible for 99 incidents, marking a 13.8% increase over the previous six months. The majority of these attacks were directed towards South Korea, with 19 recorded incidents, followed by eight against the United States.
To circumvent cybersecurity defenses, North Korean hackers increasingly employed advanced tools, including generative artificial intelligence, deepfakes, compromised code repositories, and fraudulent job recruitment schemes. These sophisticated methods were primarily focused on infiltrating critical systems and networks.
Written by urgent.news from The Korea Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
