Hi, Reddit!

We, the WRAVEN team, have just completed an analysis of Salt Typhoon (UNC2286), a sophisticated APT group linked to the PRC. Active since 2020, they’ve targeted critical sectors, government infrastructure, and private entities with advanced cyber-espionage tactics.

Highlights of Our Findings:

• 2024 Election Interference: Salt Typhoon breached devices belonging to President-elect Donald Trump and Senator J.D. Vance, accessing sensitive communications.
• Advanced Malware: Their tools, like Demodex and SparrowDoor, blend seamlessly with legitimate processes to evade detection.
• Tactics: Exploiting unpatched systems and using tools like PowerShell, they achieve long-term, undetected infiltration.

Despite efforts from agencies like the FBI and NSA, their operations remain a significant threat to national security.

What Can We Do? Adopt zero-trust architectures, patch systems regularly, and strengthen encryption to mitigate risks.

👉 Read the full analysis here: