Scworld
APT Groups Target Construction Sector for Credential Theft
First seen 2 Dec 2025, 18:33 UTC
•
•80% similarity
•19.9
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The construction sector is facing increased cyber intrusions from state-backed APT groups from China, Russia, North Korea, and Iran. These groups are exploiting vulnerabilities related to the industry's digital transformation and reliance on third-party vendors to steal Remote Desktop Protocol (RDP), Secure Shell (SSH), and Citrix credentials.
ThreatCluster AI