Countries worldwide have seen their governments and military networks being hacked and troves of sensitive data exfiltrated by state-backed adversaries. The threat here is two-fold. Threat Actors primarily target organizations designated as Critical Information Infrastructure (CII) such as power plants, nuclear installations, oil pipelines and refineries, telecom network providers, and transport networks.

Additionally, threat actors are also targeting the supply chain eco-system of these organizations, which typically comprise of technology OEMs, contract manufacturers, strategic R&D partners, and IT service providers. These attacks are carried out with an explicit intent of espionage, sabotage, as well as intellectual property theft.