June 2026 Threat Trend Report on APT Groups

**Executive Summary:** The June 2026 Threat Trend Report documents that roughly 20 APT groups and associated criminal ecosystems are increasingly leveraging generative AI, cloud platforms, OAuth/token theft, and Malware-as-a-Service to expand operations beyond traditional malware—conducting supply-chain attacks (including an npm package injection), credential and token theft, exploitation of legitimate cloud services for C2/exfiltration, and targeted campaigns against developers, government, energy, healthcare, and regions with high geopolitical tension.