Inside Salt Typhoon: China’s State-Corporate Advanced Persistent Threat
Inside Salt Typhoon: China’s State-Corporate Advanced Persistent Threat
6 PagesSalt Typhoon is a People’s Republic of China–aligned cyber threat group linked to the Ministry of State Security, specializing in long‑term espionage against global telecommunications infrastructure since at least 2019. The group targets the U.S., U.K., Taiwan, and the EU, with confirmed breaches across multiple telecom providers and government‑adjacent networks. DomainTools software helped defenders by supplying deep domain‑level intelligence, including historical DNS data, WHOIS records, and risk‑based signals tied to Salt Typhoon’s infrastructure. This enabled analysts to map attacker operational nodes, detect newly registered or suspicious domains, attribute activity more precisely, and proactively block command‑and‑control channels to contain the group’s reach.
