Same targets, new playbooks: East Asia threat actors employ unique methods
04/04/2024Microsoft Threat Intelligence has observed several key cyber and influence trends from China and North Korea since June 2023 that demonstrate not only doubling down on familiar targets, but also attempts to use more sophisticated influence techniques to achieve their goals.
Learn moreTax season cybersecurity: What cybercriminals want and who they target most. Is it you?
03/20/2024
Learn moreThreat Actor Insights
Microsoft Security is actively tracking threat actors across observed nation state, ransomware, and criminal activities. These insights represent publicly published activity from Microsoft Security threat researchers and provide a centralized catalog of actor profiles from the referenced blogs.
Click on a threat actor icon below to learn more.
2023 Microsoft Digital Defense Report
10/05/2023The latest edition of the Microsoft Digital Defense Report explores the evolving threat landscape and walks through opportunities and challenges as we become cyber resilient.
Learn moreBehind the scenes
Security is a team sport. Meet the players.
More than 10,000 defenders worldwide
Microsoft Security’s global network of security and intelligence teams includes engineers, researchers, data scientists, cybersecurity experts, threat hunters, geopolitical analysts, investigators, and frontline responders across 77 countries.
See all expert profilesExpert profile
Homa Hayatyfar
Principal Data and Applied Science Manager Homa Hayatyfar describes the use of machine learning models to reinforce defenses, just one of many ways AI is changing the face of security.
Learn moreExpert profile
Fanta Orr
Threat intelligence expert Fanta Orr explains how threat intelligence analysis uncovers the “why” behind cyberthreat activity and helps better protect customers who might be vulnerable targets.
Learn moreThreat briefs
See All Briefs2023 Threat Intelligence Year in Review: Key Insights and Developments
Microsoft Threat Intelligence rounds up the top threat actor trends in tactics, techniques, and procedures (TTPs) from 2023.
Learn moreReports
See All ReportsSame targets, new playbooks: East Asia threat actors employ unique methods
Microsoft Threat Intelligence has observed several key cyber and influence trends from China and North Korea since June 2023 that demonstrate not only doubling down on familiar targets, but also attempts to use more sophisticated influence techniques to achieve their goals.
Learn moreMore from Microsoft Security
Russian US election interference targets support for Ukraine after slow start
Foreign malign influence in the U.S. presidential election got off to a slower start than in 2016 and 2020 due to the less contested primary season. Get insights and analysis on the latest threat activity.
Learn moreAttackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters
Microsoft recently uncovered an attack that exploits new critical vulnerabilities in OpenMetadata to gain access to Kubernetes workloads and leverage them for cryptomining activity.
Learn moreHow Microsoft discovers and mitigates evolving attacks against AI guardrails
Read about some of the key issues surrounding AI harms and vulnerabilities, and the steps Microsoft is taking to address the risk.
Learn more