Trace Id is missing

Nation State Actor

Silk Typhoon

A close-up of a planet
The actor Microsoft tracks as Silk Typhoon (HAFNIUM) is a nation-state activity group based out of China. Silk Typhoon (HAFNIUM) is known to primarily target healthcare, law firms, higher education, defense contractors, policy think tanks, and non-governmental organization (NGOs) located in the United States, Australia, Japan, and Vietnam. Silk Typhoon (HAFNIUM) focuses on reconnaissance and data gathering by searching open websites for leaked data about the targeted infrastructure, as well using tools like China Chopper and exploiting 0-day vulnerabilities.

Also known as:                                                   Industries targeted:

 

timmy, HAFNIUM                                                Policy think tanks

                                         

                                                                              Non-government organizations

Country of origin:

China                                                                    Infectious disease researchers          

                                                                              Law firms                       

                                                                              

Countries targeted:                                           Higher education institutions

 

Global                                                                   Defense

Microsoft Threat Intelligence: Recent Silk Typhoon Articles

HAFNIUM targeting Exchange Servers with 0-day exploits

On-Premises Exchange Server Vulnerabilities Resource Center