China-linked cyber groups intensify attacks on US tech firms, targeting AI

CrowdStrike’s 2026 Technology Threat Landscape Report, covering April 2025 – March 2026, found that China‑nexus adversaries were responsible for 58% of state‑sponsored cyber intrusions against U.S. technology companies. Five groups—MURKY PANDA, MUSTANG PANDA, OVERCAST PANDA, SUNRISE PANDA and WARP PANDA—focused heavily on the tech sector, seeking artificial‑intelligence assets and intellectual property.

MURKY PANDA alone carried out password‑spraying attacks that compromised more than 340 U.S. organizations. Across the reporting period, AI‑enabled attacks rose 89%, making the technology sector the most targeted industry worldwide by both state‑sponsored actors and criminal enterprises. The report underscores Beijing’s strategic push for technological self‑sufficiency and the heightened risk of supply‑chain compromise for downstream customers.

CrowdStrike also noted activity from North Korean groups, but the primary threat to U.S. tech firms comes from the China‑linked panda groups targeting AI capabilities and valuable IP.