Salt Typhoon
Also known as: GhostEmperor, FamousSparrow
Chinese state-sponsored targeting telecom providers for surveillance access.
Associated Intelligence
Chinese PhaaS Ecosystem Grows
A growing Chinese-language phishing-as-a-service (PhaaS) ecosystem is targeting the general
Chinese APTs Use Linux Backdoor
Chinese Advanced Persistent Threats (APTs) have been using a
Chinese APTs Expand Targets
Chinese Advanced
Azerbaijani Oil Firm Hit by Microsoft Exchange Exploit
An Azerbaijani oil and gas company was targeted by a Chinese-affiliated threat actor in a multi-wave intrusion between December 2025 and February 2026. The attack, attributed to the FamousSparrow hacking group, exploited Microsoft Exchange vulnerabilities. Affected organizations should review their Exchange server security and apply patches.
China-Linked APT Targets Energy Firm
A China-linked advanced persistent threat (APT) group, known as FamousSparrow, has launched repeated attacks on an Azerbaijani oil
Chinese National Extradited for Cyber Espionage
A Chinese national has been extradited to the US for alleged involvement in the Silk Typhoon cyber campaign, which targeted US and international companies. The individual is also linked to COVID-19-related espionage efforts. Companies that have been targeted by Silk Typhoon should review their security measures to prevent similar attacks.
China-Nexus Covert Networks
China-nexus cyber actors have shifted their
China-Linked Covert Networks
The UK's National Cyber Security Centre (NCSC) warns of China-nexus covert networks
China-Linked Covert Networks
The UK's National Cyber Security Centre (NCSC) warns of a shift in
UK Faces Sophisticated Cyber Threats
The UK National Cyber Security Centre (NCSC) warns of highly sophisticated state-sponsored cyberattacks from Chinese intelligence and military agencies, posing a significant threat to Britain's cyber defenses. These attacks are not limited to financial gain, but also aim to cause harm and disrupt critical infrastructure. Organizations are advised to reassess their cybersecurity measures and avoid relying solely on the cheapest contractors.