Threat actor nation
China
100 scored AI-enabled operations attributed to China
Overview
Written by the AIRE team.
Primary Threat Groups:
Salmon Typhoon, Salt Typhoon, Charcoal Typhoon, SweetSpecter, APT41, Keyhole Panda, Vixen Panda
Strategic Objectives:
- Intelligence & Espionage. Gather sensitive political, defense, and industrial information, often through covert operations.
- Operational access. Establish and maintain network persistence in critical systems, including telecom and infrastructure networks.
- Global reach. Extend operations across government, defense, higher education, IT, communications, and energy sectors to maximize strategic impact.
AI capabilities
Click a capability to filter the operations.
Artifact Development42
Reconnaissance38
Intrusion, Evasion & Persistence31
Attack Orchestration23
Social Engineering20
2023202420252026
Most active actors
Click an actor to see its operations.
Sophistication by quarter
Each dot is one operation attributed to China; the dashed line follows the 90th percentile. Click a dot to see the incident.
Operations
73 in total, highest sophistication first.
Next profile
Russia · 103 operations
Only scored operations appear on this page; sub-incidents are counted under their parent campaign. Scores are from the run of 30 Oct 2026.