Critical minerals and rare earth elements (REEs) have become strategic geopolitical assets, with China controlling over 90% of global REE processing capacity. Competition for these resources is expanding into the Arctic, deep seabed, Antarctica, and space. State-sponsored cyber threat actors — particularly Chinese APT groups — are actively targeting mining companies, regulatory bodies, and governments to gain strategic advantage. Recorded Future's Insikt Group documents specific campaigns against Canadian miners, Indonesian organizations, and seabed mining regulators. Criminal ransomware groups are also targeting the sector and may increasingly serve as proxies or access brokers for state-sponsored operations. Organizations in or adjacent to the mining sector are advised to map supply-chain exposure, prepare fallback plans, and actively monitor for both criminal and state-sponsored intrusions.
