The FBI, CISA, NSA, and several partner-nation organizations attributed various cyber operations to Unit 29155, also known as EMBER BEAR , a group affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center.

The FBI, CISA, and NSA, assess that cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155) are responsible for computer network operations against global targets since at least 2020.

Over the past few weeks, there has been a significant increase in reported activity associated with Iranian state-sponsored or state-affiliated cyber threat groups. One of these cyber threat actors was observed targeting US and foreign organizations in various sectors.

The current state of geopolitical unrest has led to nation-state threat actors launching cyberattacks to advance their political and economic agendas, thereby influencing and endangering critical information, as well as public safety and services. Click to learn more.

While other state-sponsored cyber threat activity has recently surged, MuddyWater, an Iranian threat group affiliated with the Ministry of Intelligence (MOIS), has consistently targeted Israel and its allies with a barrage of cyberattacks since the onset of the Israeli-Hamas War.

A joint international cybersecurity advisory from across 8 countries, including the U.S., warns of the recently observed tactics used by the Chinese state-sponsored APT40, also known as Kryptonite Panda, GINGHAM TYPHOON, Leviathan, and Bronze Mohawk.

The Cybersecurity and Infrastructure Security Agency (CISA) has collaborated with the Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) to release an advisory outlining a People's Republic of China (PRC) state-sponsored cyber threat group.

There has been an observed escalation of various state-sponsored cyber threat actors' activities. Recently exposed activity by Russian and Chinese-backed hacking groups indicates that the cyber threat landscape has been permanently altered.

The NJCCIC continues to observe TOAD phishing email attacks. Prior to the attack, cybercriminals perform reconnaissance on victims, gathering information from various sources, such as past data breaches, social media profiles, and data purchased on the dark web.

LockBit ransomware has long held a dominant position at the forefront of the most active and prevalent threats in the cyber landscape. Since 2019, LockBit has orchestrated numerous attacks targeting entities regardless of their size or global location. Read to learn on how to protect against this.