Oil shipments, drone makers, and a poisoned code library targeted in recent APT campaigns
Geopolitical pressure drove much of the state-sponsored cyber activity recorded between October 2025 and March 2026, according to ESET’s latest APT Activity Report. Espionage groups aligned with China, North Korea, Russia, and Iran adjusted their targets to match the economic and security concerns of their governments. Attack sources (Source: ESET) “In Asia, the campaigns primarily focused on governmental organizations, strategic industries, and advanced technology sectors. In the Middle East, Israel remained the principal focus of … More → The post Oil shipments, drone makers, and a poisoned code library targeted in recent APT campaigns appeared first on Help Net Security.
Geopolitical pressure drove much of the state-sponsored cyber activity recorded between October 2025 and March 2026, according to ESET’s latest APT Activity Report. Espionage groups aligned with China, North Korea, Russia, and Iran adjusted their targets to match the economic and security concerns of their governments. Attack sources (Source: ESET) “In Asia, the campaigns primarily focused on governmental organizations, strategic industries, and advanced technology sectors. In the Middle East, Israel remained the principal focus of … More →
The post Oil shipments, drone makers, and a poisoned code library targeted in recent APT campaigns appeared first on Help Net Security.
MITRE ATT&CK
Tactics, Techniques & Procedures
Defensive mapping
Mapped controls
The audit will verify each of these controls is in place and effective.
| Control | Confidence | Why it matters |
|---|---|---|
| EDR with behavioural detection suggested | 75% | Recommended control for apt |
| Network segmentation between user and server tiers suggested | 75% | Recommended control for apt |
| PAM suggested | 75% | Recommended control for apt |
| Threat hunting suggested | 75% | Recommended control for apt |
| Log retention and SIEM suggested | 75% | Recommended control for apt |