Salt Typhoon: An Analysis of Vulnerabilities Exploited by this State-Sponsored Actor

Salt Typhoon, a state-sponsored actor linked to the People’s Republic of China, has breached at least nine U.S.-based telecommunications companies with the intent to target high profile government and political figures. 

Salt Typhoon typically gains initial access to its victim networks by targeting external-facing assets using known vulnerabilities. While not an exhaustive list, Tenable Research has examined the tactics, techniques and procedures (TTPs) employed, including the exploitation of known vulnerabilities associated with this threat actor.

For more information about these TTPs and the threat actor known as Salt Typhoon, please visit our blog.