Salt Typhoon

Salt Typhoon
Formation2020; 4 years ago (2020)
TypeAdvanced persistent threat
PurposeCyberwarfare
Location
AffiliationsChinese government

Salt Typhoon (also known as GhostEmperor[1], FamousSparrow[1], King of world, or UNC2286[1]) is an advanced persistent threat actor that is reported to be operated by the Chinese government to conduct cyberespionage campaigns against targets in North America and Southeast Asia. Active since 2020, the group engages in widespread data theft, particularly capturing network traffic. Former NSA analyst Terry Dunlap has called the group "another component of China's 100-Year Strategy."[2] According to former CISA director Chris Krebs and other U.S. officials, the group is affiliated with China's Ministry of State Security.[3][4]

  1. ^ a b c Cite error: The named reference :0 was invoked but never defined (see the help page).
  2. ^ Lyons, Jessica (2024-09-25). "China's Salt Typhoon cyber spies are deep inside US ISPs". The Register. Archived from the original on 2024-10-08. Retrieved 2024-10-08.
  3. ^ Krouse, Sarah; McMillan, Robert; Volz, Dustin (2024-09-26). "China-Linked Hackers Breach U.S. Internet Providers in New 'Salt Typhoon' Cyberattack". The Wall Street Journal. Archived from the original on 7 Oct 2024.
  4. ^ Cite error: The named reference wapo/2024/10/06/salt-typhoon was invoked but never defined (see the help page).