Threat actor
Flax Typhoon
Tracked by CyberSIXT since 23 Apr · last activity 9 Oct
CNMalpedia
- CVEs linked · all time
- 5
- in CISA KEV · all time
- 5
- articles · all time
- 4
3 articles since 11 Sep; 1 CISA notice, marked below the bars.
Show as table
| Day (UTC) | Articles |
|---|---|
| Thu 8 Oct | 1 |
| Fri 9 Oct | 2 |
CVEs
5 CVEsCVE-2015-3306ProFTPD Improper Access Control VulnerabilityCVSS10.0CriticalExploited99.4%EPSS5articles
CVE-2021-3199ONLYOFFICE Docs Server Path Traversal VulnerabilityCVSS9.8CriticalExploited20%EPSS4articles
CVE-2023-22894Strapi Cleartext Storage of Sensitive Information VulnerabilityCVSS7.2HighExploited3.6%EPSS4articles
- CISA Adds Five Flaws to KEV After Flax Typhoon AttacksThe Hacker News
- FBI Seizes Seven Domains Used by China Linked Flax Typhoon to Target US InfrastructureThe Hacker News
- Allies Warn China Linked Firm Helped Hack Networks WorldwideNCSC · official notice
- UK NCSC warns of China linked botnet using 200k compromised devicesCISA · first in our coverage · official notice