State-Backed Hackers Expand Cyber Operations Along Conflict Lines
Jena – November 02, 2026 -- State-backed hacking groups from Russia, Iran, North Korea and China are expanding their activity and tailoring campaigns to global conflicts, according to ESET's latest APT Activity Report. Targets include governments, defense contractors, critical infrastructure, technology providers and institutions in geopolitical crisis regions.
Attackers use AI for malware, phishing and fake websites
Threat actors increasingly use AI tools to develop malicious code, build convincing phishing campaigns and generate fraudulent websites. Jean-Ian Boutin, Director of Threat Research at ESET, says AI makes individual attacks more efficient and partly lowers entry barriers for criminals. Strategic planning, target selection and execution still happen largely by hand, and the expected revolution in cybercrime has not materialized so far.