New reports from Google show that hackers are now attacking people directly to steal secrets. These hackers often work for governments. Their main targets are companies that make weapons, planes, and cars in the US and Europe.
In the past, hackers tried to attack a company’s office computers. Now, they are attacking employees on their personal devices, like home laptops or phones. This is harder for companies to stop because it happens outside the office network.
The hackers use very clever methods:
Fake Job Offers: Some hackers pretend to be recruiters. They send fake job offers to people to steal their passwords.
AI Technology: They use Artificial Intelligence to learn about an employee’s salary and role before they attack.
Fake Websites: They create websites that look real but are actually designed to steal information.
North Korea: Recently, the US discovered that over 100 North Koreans used fake identities to get remote IT jobs at American companies. They did this to earn money and steal cryptocurrency.
Russia: Hackers have attacked the Signal and Telegram accounts of soldiers and journalists in Ukraine. They even pretended to be teachers of drone courses to trick soldiers.
China and Iran: These groups send personalized emails. For example, if an employee has children, they might receive a fake email from a school or a youth club to make them click a dangerous link.
Experts say this is now a global problem. It is not only about one country. Because many international companies work together on projects, a hacker can attack a person in one country to get secrets from another.
To stay safe, employees must be very careful about the emails they open and the jobs they apply for online.
Based on an article originally published by The Guardian on 10th February 2026
Who is the main target of the new cyber-espionage campaigns?
What technology do hackers use to learn about an employee's salary and role?
In the US, what was the secret goal of the 100 North Koreans who got remote IT jobs?
How did hackers try to trick Ukrainian soldiers recently?
What is "spoofing" in the context of this text?
According to the text... Why did some employees receive emails from the "Boy Scouts of America"?
What did Iranian hackers use to steal credentials?
Why is this described as a "transnational security issue"?
Why is it harder for companies to stop these attacks now?
What is the best way for employees to stay safe according to the summary?