Dutch intelligence warn that China-linked APT Salt Typhoon targeted local critical infrastructure

Dutch intelligence says China-linked APT Salt Typhoon targeted the Netherlands, with the campaign hitting local critical infrastructure rather than major telecoms. In a joint assessment, MIVD and AIVD said Chinese cyber spies linked to Salt Typhoon accessed routers belonging to Dutch targets but did not penetrate deeper into their internal networks.

The advisory, published by the Ministry of Defence, notes that the Salt Typhoon group has been active for 1–2 years and has targeted telecommunications providers in several dozen countries, alongside broader hits to global critical infrastructure. The joint reporting also references warnings from NSA, CISA, and FBI, and a Cybersecurity Advisory linking Salt Typhoon to multiple China-based entities, including Sichuan Juxinhe Network Technology Co.

Ltd., Beijing Huanyu Tianqiong Information Technology Co., Ltd., and Sichuan Zhixin Ruijie Network Technology Co., Ltd., which provide cyber products and services to Chinese state actors. The article states that the campaign’s global scope underscores ongoing strategic risks to telecoms, government, transport, lodging, and military sectors.