Salt Typhoon

Salt Typhoon is a People's Republic of China (PRC) state-backed actor that has been active since at least 2019, responsible for numerous compromises of network infrastructure at major U.S. telecommunication and internet service providers (ISP). The group's activities primarily target critical infrastructure, leveraging advanced techniques to infiltrate and maintain persistence within victim networks.