Salt Typhoon Espionage Campaign — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 25, 2025
Last Seen
November 25, 2025

Salt Typhoon Espionage Campaign is a mobile-focused espionage operation highlighted in recent government warnings.

Overview

Salt Typhoon Espionage Campaign is a mobile-focused espionage operation highlighted in recent government warnings. It is described as employing sophisticated spyware to covertly monitor and exfiltrate data from mobile devices, signaling a high-threat actor targeting mobile ecosystems. The campaign's mention in official alerts underscores its significance for cybersecurity risk and defense planning.

Related Threat Clusters

  • CISA Warns of Spyware Targeting Signal and WhatsApp Accounts

    CISA has issued a warning regarding state-backed and mercenary threat actors using commercial spyware to compromise Signal and WhatsApp accounts. These groups employ phishing, fake QR codes, malicious app impersonation,…

    12 articles · Updated November 25, 2025
  • CISA Warns of Spyware Targeting Signal and WhatsApp Users

    CISA has issued a warning regarding the use of commercial spyware by state-backed and cyber-mercenary groups to compromise Signal and WhatsApp accounts. The agency reports that these actors employ various techniques,…

    17 articles · Updated November 27, 2025

Recent Intelligence Reports

  • CISA urges mobile security as it warns of sophisticated spyware attacks — Cybersecuritydive · November 25, 2025

Related Entities

CVSS v3.1 Breakdown