Flax Typhoon
Nation-state China Dormant
- Mentions
- 3
- First seen
- 08 Oct 2026
- Last seen
- 09 Oct 2026
Relevant to you ยท Relevant
- Threat focus:
- espionage / apt
Origin
China
Profile
Flax Typhoon is a Chinese state-sponsored cyber actor. Recent reports indicate the actor exploits five vulnerabilities and targets U.S. federal agencies and critical infrastructure. The U.S. and FBI disrupted Chinese hacking tools used to breach critical infrastructure. CISA set an October 11 deadline for federal agencies.
Affected vendors
Proftpd
Targeted sectors
critical infrastructureGovernmentCritical Infrastructure
Targeted regions
North America
Targeted countries
United StatesUS
Linked CVEs
- CVE-2015-3306 KEV CVSS 10.0 EPSS 97%