Skip to main content
All Threat Actors
🇨🇳

Salt Typhoon

Also known as: GhostEmperor, FamousSparrow

Chinese state-sponsored targeting telecom providers for surveillance access.

Origin: China
Targets
telecomISPgovernment

Associated Intelligence

Chinese PhaaS Ecosystem Grows

A growing Chinese-language phishing-as-a-service (PhaaS) ecosystem is targeting the general

25/5/2026Medium

Chinese APTs Use Linux Backdoor

Chinese Advanced Persistent Threats (APTs) have been using a

21/5/2026Medium

Chinese APTs Expand Targets

Chinese Advanced

14/5/2026Medium

Azerbaijani Oil Firm Hit by Microsoft Exchange Exploit

An Azerbaijani oil and gas company was targeted by a Chinese-affiliated threat actor in a multi-wave intrusion between December 2025 and February 2026. The attack, attributed to the FamousSparrow hacking group, exploited Microsoft Exchange vulnerabilities. Affected organizations should review their Exchange server security and apply patches.

13/5/2026Medium

China-Linked APT Targets Energy Firm

A China-linked advanced persistent threat (APT) group, known as FamousSparrow, has launched repeated attacks on an Azerbaijani oil

13/5/2026Medium

Chinese National Extradited for Cyber Espionage

A Chinese national has been extradited to the US for alleged involvement in the Silk Typhoon cyber campaign, which targeted US and international companies. The individual is also linked to COVID-19-related espionage efforts. Companies that have been targeted by Silk Typhoon should review their security measures to prevent similar attacks.

28/4/2026Medium

China-Nexus Covert Networks

China-nexus cyber actors have shifted their

23/4/2026High

China-Linked Covert Networks

The UK's National Cyber Security Centre (NCSC) warns of China-nexus covert networks

23/4/2026Medium

China-Linked Covert Networks

The UK's National Cyber Security Centre (NCSC) warns of a shift in

23/4/2026High

UK Faces Sophisticated Cyber Threats

The UK National Cyber Security Centre (NCSC) warns of highly sophisticated state-sponsored cyberattacks from Chinese intelligence and military agencies, posing a significant threat to Britain's cyber defenses. These attacks are not limited to financial gain, but also aim to cause harm and disrupt critical infrastructure. Organizations are advised to reassess their cybersecurity measures and avoid relying solely on the cheapest contractors.

21/4/2026High