China-linked APTs target maritime and energy firms during Middle East conflict, ESET report finds (infosecurity-magazine.com)

• Chinese APTs exploit Middle East conflict to target maritime and energy targets
• SteppeDriver targets Syrian government networks; FamousSparrow targets Venezuelan maritime agency
• UNC5221 hits AI company in South Korea, aligns with 'Made in China 2025'
• Russian Sandworm group deploys wiper malware in Ukraine and Poland; Iranian groups reduced by internet restrictions

"ESET's 2026 APT Activity Report reveals China-backed hacking groups are exploiting instability in the Middle East to target maritime and energy companies in the Gulf region. The operations aim to improve Beijing's visibility into maritime, energy, and political developments. Other Chinese campaigns targeted government entities in Central America, an AI and robotics company in South Korea, and Syrian government networks. Russian APTs continued focusing on Ukraine, particularly with Sandworm deploying wiper malware. Iranian groups declined due to internet restrictions but proxy hacktivists increased."