The technology sector is a prime target for cyber adversaries, with 130 of 255+ tracked groups focusing attacks here. In 2024, it ranked as the number one sector by intrusion frequency, with an 82% increase in targeted intrusion activity and a 102% rise in access broker advertisements year-over-year. Adversaries exploit valid credentials, use hands-on-keyboard attacks, and employ cross-domain tactics to persist and exfiltrate data. Key actors include FAMOUS CHOLLIMA, which funnels illicit earnings to North Korea; GRACEFUL SPIDER, operators of Clop ransomware exploiting zero-day vulnerabilities; and PUNK SPIDER, behind Akira ransomware, using open-source tools to extort victims.

Join for free to read