APT Groups Target Construction Sector for Credential Theft

Advanced persistent threat (APT) groups from China, Russia, North Korea, and Iran are increasingly attacking the construction industry to gain unauthorized access to corporate networks. These attacks exploit vulnerabilities such as phishing emails and stolen credentials for Remote Desktop Protocol (RDP), Citrix, and Secure Shell (SSH), driven by the sector's rapid digital transformation and reliance on third-party vendors.