←Back to Intelligence Feed

Salt Typhoon continues to target US critical infrastructure through sustained and coordinated cyber operations. The group, an advanced persistent threat (APT) linked to the People’s Republic of China (PRC), focuses much of its activity in communications, government, and defense. These intrusions enable the theft of sensitive national security information while advancing China's efforts to expand its disruptive cyber capabilities. This access could be leveraged to impede the US military’s ability to respond effectively during a crisis or conflict.  The NJCCIC has assessed that Salt Typhoon poses a high-risk threat to public and private infrastructure in the United States, including organizations in New Jersey. The latest threat analysis report provides an in-depth Threat Actor Profile (TAP) that includes:

• An overview of ongoing threat activity, targeting patterns, objectives, and key incidents.
• A risk assessment evaluating the likelihood and potential impact of attacks.
• An outline of the tactics, techniques, and procedures (TTPs) employed.
• Examples of real-world cyber intrusions and campaigns.
• Defensive guidance and resources for network administrators and critical infrastructure operators.