Threat Focus: Salt Typhoon

Salt Typhoon represents one of the most persistent and sophisticated state-sponsored cyber threats targeting U.S. and allied networks. The group quietly infiltrates telecom, government, and military systems, using advanced malware and stolen credentials to maintain long-term access and gather highly sensitive intelligence. Their operations reveal a global espionage campaign aimed at communications surveillance and potential prepositioning for future disruptive attacks. This report sheds light on their tools, motives, and the growing risks faced by critical infrastructure worldwide.