Thus, do they all: APTs as instruments of State-Sponsored cyber operations

Abstract

The use of cyberspace by state and non-state actors has transformed international politics in the contemporary age, blurring the lines between peace and conflict. This article delves into the subject of Advanced Persistent Threats and how often state actors deploy these sophisticated cyber tools to achieve their political, military, and economic objectives. Specifically, we examine the relationship between regime type and the propensity to engage in APT activities through a comprehensive review of recent literature and statistical analysis. Even if our findings reveal that authoritarian regimes are significantly more likely to deploy state-affiliated APTs than democracies, the significant result is that APTs are used both by democratic and authoritarian regimes to achieve their goals. The study also explores the dynamics behind APT attacks by multiple state actors, with their differences in intensity and frequency of operations. For this research, the chosen countries are China, the U.S., Russia, Iran, and North Korea. Furthermore, the study shows the collaboration networks between APT groups, particularly those targeting a common adversary. These implications highlight the need to address the evolving threats posed by state-sponsored APTs and ensure that global cyber defences can keep pace with the sophistication and scale of these attacks.