Threat actor · all actors

Salt TyphoonG1045 state

aka Salt Typhoon

Last updated: 2026-07-03

0attributed CVEs

23ATT&CK techniques

0.0IDF score (tooling uniqueness)

0exclusive CVEs

—years active

About this actor

[Salt Typhoon](https://attack.mitre.org/groups/G1045) is a People's Republic of China (PRC) state-backed actor that has been active since at least 2019 and responsible for numerous compromises of network infrastructure at major U.S. telecommunication and internet service providers (ISP).(Citation: US Dept. of Treasury Salt Typhoon JAN 2025)(Citation: Cisco Salt Typhoon FEB 2025)

Source: MITRE ATT&CK

Activity timeline

No activity events recorded.

Profile

CVE	Risk	CVSS	EPSS	Published	Products
No attributed CVEs.

Mitigating controls (NIST 800-53)

Control	Techniques covered	Coverage
`SI-4`	17 / 23	74%
`AC-3`	16 / 23	70%
`CM-6`	16 / 23	70%
`AC-6`	13 / 23	57%
`CM-2`	13 / 23	57%
`CM-7`	13 / 23	57%
`AC-2`	12 / 23	52%
`AC-5`	11 / 23	48%
`CA-7`	11 / 23	48%
`IA-2`	11 / 23	48%
`AC-20`	10 / 23	43%
`SI-3`	10 / 23	43%
`AC-4`	8 / 23	35%
`CM-5`	8 / 23	35%
`SC-7`	8 / 23	35%

Co-occurring actors

None.

Similar actors

Similar TTPs

Moses Staff 0.19
Play 0.16
CostaRicto 0.15
Thrip 0.15
FIN13 0.14