Adversary Intelligence — 2026-06-09

CrowdStrike Reports China-Linked Hackers Drive 58 Percent of State-Sponsored Intrusions Against Tech Sector

BLUFChina and DPRK adversaries are scaling industrial collection against U.S. technology firms at the precise moment the Section 702 lapse degrades the primary counterintelligence tool for detecting them.

CrowdStrike's 2026 Technology Threat Landscape Report, released June 9, identifies technology as the most targeted industry globally, with China-nexus adversaries driving more than 58% of state-sponsored intrusions against the sector 123. Five named Chinese groups, including MURKY PANDA and MUSTANG PANDA, led that activity; MURKY PANDA's password-spraying campaign alone impacted more than 340 U.S.-based entities 3. DPRK-nexus actor FAMOUS CHOLLIMA used AI-enhanced personas and U.S. front companies to place operatives inside tech firms, accounting for 47% of state-sponsored interactive intrusions against the sector 34. Financially motivated attacks represented 65% of all interactive operations, with initial access brokers advertising access to 277 technology organizations, a nearly 30% increase over the prior period 3.

Analysis
Five named China-nexus groups have moved from opportunistic intrusion to industrial-scale IP collection, with password-spraying reaching more than 340 U.S. entities, though CrowdStrike's telemetry reflects its own customer composition and may overstate Beijing's relative share of the global picture. FAMOUS CHOLLIMA marks the sharper structural shift: DPRK has moved from peripheral revenue schemes to placing AI-enhanced personas inside target firms as persistent collection assets. A 30% expansion in IAB-advertised access and the Axios NPM compromise indicate adversaries are targeting development infrastructure to multiply downstream exposure. The Section 702 lapse removes NSA's primary statutory authority for upstream collection against exactly these actors.

4 sources

CrowdStrike 2026 Technology Threat Landscape Report: China Steals AI Capabilities It Can't Build - Business Wire
CrowdStrike 2026 Technology Threat Landscape Report: China Steals AI Capabilities It Can't Build - CrowdStrike Investor Relations
CrowdStrike 2026 Technology Threat Report: China Targets AI
Chinese Hackers Pose Biggest Espionage Threat to Tech Firms, CrowdStrike Says - Insurance Journal