Salt Typhoon

OriginChina

Techniques (MITRE ATT&CK)14

SourceMITRE ATT&CK

Vexday analysis

Ator patrocinado pelo Estado da República Popular da China, o Salt Typhoon (identificador MITRE ATT&CK G1045) está ativo desde pelo menos 2019 e é responsável por numerosos comprometimentos de infraestrutura de rede em grandes provedores de telecomunicações e de serviços de internet dos Estados Unidos. O grupo possui 14 técnicas documentadas na base MITRE ATT&CK e tem 3 CVEs atribuídas como parte de seu arsenal de exploração.

Techniques (MITRE ATT&CK) 14

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Reconnaissance

Network Topology

Resource development

Malware Tool

Initial access

Exploit Public-Facing Application

Persistence

SSH Authorized Keys Create Account

Credential access

Network Sniffing Password Cracking

Lateral movement

SSH

Collection

Network Device Configuration Dump

Command and control

Protocol Tunneling

Exfiltration

Exfiltration Over Unencrypted Non-C2 Protocol

defense-impairment

Clear Linux or Mac System Logs Disable or Modify System Firewall

Exploited vulnerabilities 3

CVEs this group is known to exploit, per MITRE ATT&CK. Ordered by real-world severity.

CVE-2014-7169CRITICALEPSS 100%KEV CVE-2018-0171HIGHEPSS 100%KEV CVE-2016-6662EPSS 68%

Salt Typhoon uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →