Search all coverage

Threat actor

Flax Typhoon

Tracked by CyberSIXT since Apr 23, 2026 · last activity Oct 9, 2026

Associated CVEs

CVE-2015-3306KEV CVE-2021-3199KEV CVE-2016-3081KEV CVE-2015-5477KEV CVE-2023-22894KEV

Coverage timeline

CISA Adds Five Flaws to KEV After Flax Typhoon Attacks
thehackernews.com · Oct 9, 2026
FBI Seizes Seven Domains Used by China Linked Flax Typhoon to Target US Infrastructure
thehackernews.com · Oct 9, 2026
Allies Warn China Linked Firm Helped Hack Networks Worldwide
www.ncsc.gov.uk · Oct 8, 2026
UK NCSC warns of China linked botnet using 200k compromised devices
www.cisa.gov · Apr 23, 2026