Hacktivists, State Actors, Cybercriminals Target Global Defense Industry, Google Warns

Eduard Kovacs

Source Link

Hacktivists, state-sponsored threat actors, and profit-driven cybercrime groups have been targeting the defense industrial base (DIB) sector, according to an analysis published on Wednesday by Google Threat Intelligence Group (GTIG).

Google warns of escalating, multifaceted cyber threats targeting the global DIB, including contractors, suppliers, and personnel supporting military capabilities.

The analysis highlights a “relentless barrage” of cyber operations from state-sponsored actors linked to China, Russia, Iran, and North Korea; pro-Russia and pro-Iran hacktivists; and cybercriminals, particularly groups launching ransomware attacks on manufacturing.

China-nexus cyberespionage dominates in volume, often exploiting edge devices and zero-days for long-dwell intrusions into aerospace and defense entities. Groups conducting such operations include UNC4841, UNC3886 (blamed for the recent Singapore telecom attacks), and UNC5221.