Threat Actor

Flax Typhoon

Properties

summary
The China-linked APT group Flax Typhoon exploited five vulnerabilities in critical infrastructure intrusions, prompting FBI domain seizures and a CISA remediation deadline.
first_seen
2026-10-12T04:00:18.238008+00:00
last_seen
2026-10-12T04:00:18.238008+00:00
created_at
2026-10-12T04:00:18.238008+00:00
mention_count
1
evidence_url
https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.html
target
critical infrastructure
provenance
news-scan
scan_confidence
0.95
suspected_origin
China
status
pending

Explore this actor's full graph with Ninja Signal

Flax Typhoon — Threat Actor Profile — Ninja Signal | Ninja Signal