What other aliases and vendor names is Salt Typhoon known by?

Salt Typhoon is tracked across the cybersecurity industry by multiple aliases, including: Earth Estries, FamousSparrow, G1045, GhostEmperor, OPERATOR PANDA, RedMike, SLIME57, UNC2286.

What are the primary motivations and sponsors of Salt Typhoon?

Salt Typhoon operates from Unknown with primary motivation categorized as Espionage / Financial, sponsored or affiliated with State-sponsored / Independent.

Salt Typhoon

▲ High Threat

Primary Aliases: OPERATOR PANDA UNC2286 UNC4841 UNC5807

Confidence Rating 80% (Grounded)

Salt Typhoon is a People's Republic of China (PRC) state-backed actor that has been active since at least 2019 and responsible for numerous compromises of network infrastructure at major U.S. telecommunication and internet service providers (ISP).(Citation: US Dept. of Treasury Salt Typhoon JAN 2025)(Citation: Cisco Salt Typhoon FEB 2025)