This is the Trace Id: 0b2e09d10eb439b577d6c6db46acb984

Nation State Actor

Silk Typhoon

A close-up of a planet
The actor Microsoft tracks as Silk Typhoon (HAFNIUM) is a nation-state activity group based out of China. Silk Typhoon (HAFNIUM) is known to primarily target healthcare, law firms, higher education, defense contractors, policy think tanks, and non-governmental organization (NGOs) located in the United States, Australia, Japan, and Vietnam. Silk Typhoon (HAFNIUM) focuses on reconnaissance and data gathering by searching open websites for leaked data about the targeted infrastructure, as well using tools like China Chopper and exploiting 0-day vulnerabilities.

Also known as:                                                   Industries targeted:

 

timmy, HAFNIUM                                                Policy think tanks

                                         

                                                                              Non-government organizations

Country of origin:

China                                                                    Infectious disease researchers          

                                                                              Law firms                       

                                                                              

Countries targeted:                                           Higher education institutions

 

Global                                                                   Defense

Microsoft Threat Intelligence: Recent Silk Typhoon Articles

HAFNIUM targeting Exchange Servers with 0-day exploits

On-Premises Exchange Server Vulnerabilities Resource Center

English (New Zealand) Consumer Health Privacy Contact Microsoft Privacy Manage cookies Terms of use Trademarks About our ads