Canada鈥檚 cyberspy agency says countries like Russia and China are increasingly targeting non-profit and advocacy groups, as well as journalists and human rights activists.

The Communications Security Establishment issued the warning Tuesday in a joint advisory with the United States, the United Kingdom, Japan, Estonia and Finland.

The advisory says 鈥渋ndustry reporting indicates a consistent pattern of state-sponsored cyber actors targeting specific segments of civil society.鈥�

CSE鈥檚 Canadian Centre for Cyber Security says in a release there is a growing online threat to civil society, which is at 鈥渉igh risk.鈥�

The advisory identifies the threat as 鈥減redominantly鈥� coming from Russia, China, Iran and North Korea.

Targeted civil society groups also include academic, cultural and diaspora organizations, as well as individuals working to advance democracy.

鈥淥ften, these organizations and their employees are targeted by state-sponsored threat actors who seek to undermine democratic values and interests,鈥� the advisory says.

The advisory warns that threat actors are using increasingly personalized and subversive tactics, and devoting significant resources to researching their targets.

It says threat actors 鈥渃ompromise organizational or personal devices and networks to intimidate, silence, coerce, harass, or harm civil society organizations and individuals.鈥�

Actors often gain access to networks and devices by using social engineering, which 鈥渓ures victims to divulge account credentials or download malware,鈥� or by having targets download apps that seem legitimate but actually include malicious software.

鈥淎fter gaining access to devices, actors often install spyware on the devices,鈥� it says.

Those targeted often have a low capacity to defend themselves 鈥� for instance, due to a lack of internal IT support.

鈥淚ndividuals that fall under the civil society umbrella often rely on insecure channels for communication and need to manage public profiles to advance their work,鈥� the advisory cautions.

鈥淥rganizations with low defence capacity are ill-prepared for and vulnerable to common cyberthreats, such as social engineering attempts.鈥�

READ ALSO:

READ ALSO: