Norwegian Government Confirms Salt Typhoon APT Group Compromised Multiple Domestic Organizations

06.02.2026

The Norwegian Police Security Service has officially attributed a series of cyber intrusions targeting multiple organizations within the country to Salt Typhoon, a sophisticated advanced persistent threat (APT) group believed to be operating under Chinese state sponsorship.

According to a report published by the Norwegian Police Security Service on Friday, the threat actor leveraged vulnerabilities in network infrastructure devices to conduct espionage operations. This disclosure positions Norway among the growing list of nations that have confirmed successful Salt Typhoon intrusions within their borders.

Salt Typhoon, characterized by senior U.S. national security officials as an "epoch-defining threat," has maintained a persistent and stealthy presence within critical infrastructure networks globally for several years. The group's operational focus has primarily centered on telecommunications providers and other strategic targets.

Notable previous compromises attributed to this threat actor include:

• Telecommunications infrastructure in Canada

• At least 200 U.S. companies, including major telecom providers

• Communications interception targeting senior political figures

The sustained campaign has prompted regulatory pressure on telecommunications operators to implement enhanced security measures and harden their network infrastructure against state-sponsored threat actors. Major carriers, including Verizon, have publicly announced remediation efforts following confirmed breaches.

The Norwegian Police Security Service's report provided limited technical details regarding the specific attack vectors, compromised organizations, or the scope of data exfiltration. Representatives from Norway's embassy in the United States have not yet issued additional statements regarding the incident.

Sources:

Norwegian Police Security Service - National Threat Assessment 2026

Tags: critical infrastructure APT Salt Typhoon State-Sponsored Attacks Telecom Security

Share: VK Telegram Twitter