North Korea Tops State-Sponsored Cyberattack List as Global Threats Rise

Cyberattacks from state-sponsored hacking groups in North Korea, China, and Russia surged by 7.5% in the first half of this year, according to a threat intelligence report by cybersecurity firm S2W.

The majority of these attacks occurred in the first quarter, with North Korea being the most active state-backed threat actor, accounting for 99 incidents - a 13.8% jump from the previous six-month period.

North Korean actors primarily targeted South Korea and the US, using advanced tools such as generative AI, deepfakes, and compromised code repositories to infiltrate cryptocurrency markets and IT service providers.

Russian-backed cyberoperations increased by 30% to 26 incidents, expanding their geographic footprint beyond Ukraine and targeting energy grids, government networks, and military systems.