← threat actors
threat actor · CN
HAFNIUM
also tracked as zhang yu 1, silk typhoon 1
2 stories · 2 in the wild · July 29, 2026 – October 8, 2026
evidence: 2 observed
sectors
- education 1 · Oct 8
- healthcare 1 · Oct 8
- technology 1 · Jul 29
geography
- china 1 · Oct 8
- united states 1 · Oct 8
what we reported, newest first, grouped by story
October 8, 2026
- The State Department posted a $10M reward for Zhang Yu, described as a prominent figure in the Hafnium campaign and accused of MSS-directed espionage against COVID-19 research at US universities (The Record).
· Oct 8 · observed · as zhang yu · Arrests & Enforcement
July 29, 2026
- Huntress declassified its role in an FBI manhunt tied to the 2021 Silk Typhoon Exchange campaign — which it puts at 88,000 compromised servers, far beyond the "limited and targeted" framing at the time — ending in the arrest of a state-backed operator (Huntress).
· Jul 29 · observed · as silk typhoon · Threat Activity