Skip to content
Cyber Espionage Escalates in Europe Amid Geopolitical Tensions

Cyber Espionage Escalates in Europe Amid Geopolitical Tensions

First seen 15 Oct 2026, 13:33 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 15, 2026 at 14:38 UTC
  • •Cyberattacks on European public sector increased by 114% in 30 months.
  • •State-sponsored actors are using advanced techniques for espionage.
  • •Focus has shifted from malware to data transfer and privilege escalation.

Cyberattacks on the public sector have surged by 114% in Europe over the past 30 months, with an average of 2,563 attacks per week per organization. This increase is attributed to rising geopolitical tensions, particularly related to the ongoing conflict between Russia and Ukraine. Check Point Research reports that state-sponsored actors are increasingly using sophisticated methods, including the BlueMoon exploit kit for targeted spearphishing. Additionally, the Iranian group MuddyWater has been linked to espionage campaigns affecting high-value organizations across multiple continents, employing stealthy techniques that blend in with normal IT activities. The focus of these attacks has shifted from malware to data transfer and privilege escalation, making detection more challenging. The vulnerabilities of government and private sectors are exacerbated by the presence of sensitive data and strategic supply chains. The situation remains critical as organizations struggle to defend against these evolving threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-15
Cyberattacks surge reported
Check Point Research reveals a 114% increase in cyberattacks on European public sector organizations over 30 months.
En.Ilsole24Ore
2026-10-15
MuddyWater campaign detailed
WatchGuard Technologies attributes a recent espionage campaign to the Iranian group MuddyWater, affecting organizations globally.
En.Ilsole24Ore

More articles in this cluster (2)

Following this threat?

Track APT28 and Education in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (28)

1 / 3

Common questions

What sectors are primarily affected?
The public sector and high-value organizations across various industries, including finance and manufacturing, are primarily targeted.
What methods are being used in these attacks?
Attackers are increasingly using data transfer and privilege escalation techniques rather than traditional malware.
How can organizations defend against these threats?
Organizations should focus on detecting anomalous behavior and securing sensitive data to mitigate risks.