Skip to main content
All assessments
SM-2026-TA-107Threat level: Severe

Cyber Sleeper Access

Nation-state hacking groups, pre-positioned infrastructure access, and crisis-activation risk.

Download full PDF
Cover of Cyber Sleeper Access

Quiet, durable access embedded in ordinary infrastructure gives adversaries options for espionage, disruption, and crisis activation.

Key judgments

  • Cybersecurity — assessed as a driving factor in this analytic line, tracked over the 12 months forecast horizon.
  • Critical Infrastructure — assessed as a driving factor in this analytic line, tracked over the 12 months forecast horizon.
  • China — assessed as a driving factor in this analytic line, tracked over the 12 months forecast horizon.
  • Russia — assessed as a driving factor in this analytic line, tracked over the 12 months forecast horizon.
  • Iran — assessed as a driving factor in this analytic line, tracked over the 12 months forecast horizon.
  • North Korea — assessed as a driving factor in this analytic line, tracked over the 12 months forecast horizon.

The full assessment, including sourcing, analytic confidence statements, and indicators and warnings, is available in the downloadable PDF.

Download full PDF

Related assessments