current

Nation-State & Cybercrime Blur

The lines between nation-state attacks and cybercriminal activity are blurring, with both groups adopting each other's tactics and tools.

Detailed Analysis

Traditional distinctions between nation-state actors and cybercriminals are eroding. Nation-states are increasingly employing cybercrime tactics for financial gain, while cybercriminals are exhibiting levels of sophistication previously associated with state-sponsored operations. This convergence presents a significant challenge for defenders, as it requires a more nuanced understanding of the threat landscape.

Context Signals

North Korean hackers have stolen over $3 billion in cryptocurrency since 2017. Russian threat actors are incorporating commodity malware and outsourcing cyberespionage operations to criminal groups.

Edge

This convergence may lead to the development of hybrid threat groups, combining the resources and expertise of both nation-states and cybercriminals. Attribution of attacks will become more difficult, hindering accountability and response efforts.
Click to access the source report
Tune in
to all the
TRENDS
This year, state-affiliated threat actors increasingly used criminal tools and tactics—and even criminals themselves—to advance their interests, blurring the lines between nation-state backed malign activity and cybercriminal activity.