Flax Typhoon — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
9
occurrences
First Seen
January 4, 2026
Last Seen
June 18, 2026

Flax Typhoon is a apt_group tracked across 7 threat clusters and 9 intelligence report mentions on ThreatCluster. First observed January 4, 2026; most recent activity June 18, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Smart Home Devices From Amazon, Walmart Arrive Pre-Wired for Crime: 20 Million at Risk — Techtimes · June 18, 2026
  • Canada’s Spy Service Won Permission to Hack Two State-Linked Botnets — Assessed to Likely Include China — Hiding Inside Canadian Homes — Todayville · June 16, 2026
  • Canada's Spy Service Won Permission to Hack Two State-Linked Botnets — Todayville · June 16, 2026
  • Srsly Risky Biz: US Vows to Fight Distillation Attacks — News.Risky.Biz · April 30, 2026
  • BPFdoor hides deep inside the OS kernel to target telecoms worldwide | news — Scworld · March 26, 2026
  • FCC bans import of new consumer routers made overseas, citing security risks — Techcrunch · March 24, 2026
  • FCC bans import of consumer — Cybersecuritydive · March 24, 2026
  • EU sanctions Iranian cyber front over election meddling, Charlie Hebdo breach — Theregister · March 17, 2026

CVSS v3.1 Breakdown