Threat actor nation
China
108 scored AI-enabled operations attributed to China
Overview
Written by the AIRE team.
Primary Threat Groups:
Salmon Typhoon, Salt Typhoon, Charcoal Typhoon, SweetSpecter, APT41, Keyhole Panda, Vixen Panda
Strategic Objectives:
- Intelligence & Espionage. Gather sensitive political, defense, and industrial information, often through covert operations.
- Operational access. Establish and maintain network persistence in critical systems, including telecom and infrastructure networks.
- Global reach. Extend operations across government, defense, higher education, IT, communications, and energy sectors to maximize strategic impact.
AI capabilities
Click a capability to filter the operations.
Artifact Development44
Reconnaissance42
Intrusion, Evasion & Persistence34
Attack Orchestration27
Social Engineering20
2023202420252026
Most active actors
Click an actor to see its operations.
Sophistication by quarter
Each dot is one operation attributed to China; the dashed line follows the 90th percentile. Click a dot to see the incident.
Operations
76 in total, highest sophistication first.
Next profile
Russia · 107 operations
Only scored operations appear on this page; sub-incidents are counted under their parent campaign. Scores are from the run of 13 Nov 2026.