Flax Typhoon
Ethereal PandaStorm-0919
Flax Typhoon is a Chinese state-sponsored threat actor that primarily targets organizations in Taiwan. They conduct espionage campaigns and focus on gaining and maintaining long-term access to networks using minimal malware. Flax Typhoon relies on tools built into the operating system and legitimate software to remain undetected. They exploit vulnerabilities in public-facing servers, use… Source: MISP
Attributed country: CN according to MISP
Activity on Jábega · 12 weeks
1 stories · first seen on 8 Oct 2026 · last seen on 8 Oct 2026
News
- International coalition seizes tools used by cyber firm behind Flax TyphoonThe Record · 8 Oct 2026
Relationships come from co-occurrence in the news, not attribution. Sources: MISP galaxy and SigmaHQ.