Salt Typhoon — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
157
occurrences
First Seen
October 24, 2025
Last Seen
July 13, 2026

Salt Typhoon is a apt_group tracked across 50 threat clusters and 157 intelligence report mentions on ThreatCluster. First observed October 24, 2025; most recent activity July 13, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Weak Security Continues to Fuel Russian Cyberattacks — Darkreading · July 13, 2026
  • FSB Center 16 Exploited Default Router Passwords to Map Critical Infrastructure for Years — Techtimes · July 13, 2026
  • Russian State — Darkwebinformer · July 13, 2026
  • Senators Signal App Classified Information — www.notus.org · July 2, 2026
  • ASIO Reveals Nation-State Hack of Australian Critical Infrastructure — Technadu · June 25, 2026
  • Canada’s Spy Service Won Permission to Hack Two State-Linked Botnets — Assessed to Likely Include China — Hiding Inside Canadian Homes — Todayville · June 16, 2026
  • Canada's Spy Service Won Permission to Hack Two State-Linked Botnets — Todayville · June 16, 2026
  • CBSE Portal Attack: 50 Students Breached Payment, Fees Hit Rs 68,000 — Abhs.In · May 30, 2026

CVSS v3.1 Breakdown