.svg)
95
2021
89
98
97
94
83
Salt Typhoon
Chinese state-linked actor (also tracked as Earth Estries, GhostEmperor, FamousSparrow) specializing in telecommunications and critical infrastructure espionage. Responsible for the 2024 compromise of major US telecom providers, including access to lawful intercept systems used by law enforcement.
Key behaviours to watch:
- Exploitation of edge devices (Cisco routers, Ivanti VPN, Fortinet) for initial access to carrier networks.
- Long-term persistence using GRE/IPsec tunnels, modified SSH keys, and living-off-the-land techniques on network infrastructure.
- Targeting of CALEA wiretap systems, call metadata, and communications of government officials.
Immersive coverage includes:
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
R00TK1T ISC CyberTeam
40
2023
50
41
55
40
42
Salt Typhoon
95
2021
89
98
97
94
83
Sandworm Team
95
2009
86
96
96
97
89
Scattered Spider
85
2022
90
77
86
90
48
Sector 16
57
2025
41
59
51
45
66
SocGhoulish
48
2018
50
53
63
66
68
StrongPity
75
2012
50
55
42
60
70
Transparent Tribe
70
2013
65
68
45
67
64