What other aliases and vendor names is Salt Typhoon known by?

Salt Typhoon is tracked across the cybersecurity industry by multiple aliases, including: Earth Estries, G1045, GhostEmperor, UNC5807.

What are the primary motivations and sponsors of Salt Typhoon?

Salt Typhoon operates from Unknown with primary motivation categorized as Espionage / Financial, sponsored or affiliated with State-sponsored / Independent.

Salt Typhoon

▲ High Threat

Primary Aliases: UNC5807 Earth Estries G1045 GhostEmperor

Sponsor / State Affiliation Independent / Not Attributed

Primary Motivation Espionage / Financial

Active Timeline Unknown – Present

Confidence Rating 80% (Grounded)

Salt Typhoon is a People's Republic of China (PRC) state-backed actor that has been active since at least 2019 and responsible for numerous compromises of network infrastructure at major U.S. telecommunication and internet service providers (ISP).(Citation: US Dept. of Treasury Salt Typhoon JAN 2025)(Citation: Cisco Salt Typhoon FEB 2025)