threatintel
actor tracker
Salt Typhoon
Advisoryseverity: Critical2025-08-27

13-nation joint advisory AA25-239A on PRC global telecom espionage

published by CISA
Actor
Salt TyphoonCN · ChinaAPT

PRC state-backed actor responsible for the 2024 intrusions into U.S. commercial telecommunications providers — among the most consequential telecom-targeted operations on the public record. Operates…

Summary

CISA, FBI, NSA and 12 partner-nation cyber agencies issued joint cybersecurity advisory AA25-239A, attributing the long-running global compromise of telecommunications, government, transportation, lodging, and military networks to PRC state-sponsored activity that partially overlaps with the cluster vendor reporting calls Salt Typhoon (also OPERATOR PANDA, RedMike, UNC5807, GhostEmperor).

Tags

five-eyestelecomespionagejoint-advisory

Primary source

cisa.gov

Other Salt Typhoon events