Healthy processed event from Hybrid War Tracker
Headline: Norwegian intelligence discloses country hit by Salt Typhoon campaign
Short Summary: On February 6, 2026, Norway's Police Security Service (PST) disclosed that the Chinese state-sponsored Salt Typhoon cyber espionage campaign had compromised telecommunications and critical infrastructure network devices in Norway. The PST's annual threat assessment described Norway's security situation as the most severe since World War II, pressured by multiple foreign intelligence services, with China leading the cyber threat. The campaign reportedly allowed interception of communications during the 2024 U.S. presidential race. While China dominates, Russia remains the principal threat to Norway overall, conducting espionage, influence campaigns, and covert operations. Iran is anticipated to also carry out espionage and destructive operations. The report calls for enhanced cooperation between public authorities and private sectors to better protect critical infrastructure amid increasingly integrated cyber and traditional espionage threats.
Extended Summary: On February 6, 2026, Norway's Police Security Service (PST) disclosed that the Chinese state-sponsored Salt Typhoon cyber espionage campaign had compromised telecommunications and critical infrastructure network devices in Norway. The PST's annual threat assessment described Norway's security situation as the most severe since World War II, pressured by multiple foreign intelligence services, with China leading the cyber threat. The campaign reportedly allowed interception of communications during the 2024 U.S. presidential race. While China dominates, Russia remains the principal threat to Norway overall, conducting espionage, influence campaigns, and covert operations. Iran is anticipated to also carry out espionage and destructive operations. The report calls for enhanced cooperation between public authorities and private sectors to better protect critical infrastructure amid increasingly integrated cyber and traditional espionage threats.
On February 6, 2026, Norway's domestic security agency PST confirmed that the Chinese state-sponsored espionage campaign called Salt Typhoon compromised network devices in Norwegian organizations. The Norwegian Police Security Service's annual threat assessment for 2026 stated that Norway is facing its most serious security situation since World War II due to pressure from multiple foreign intelligence services. Salt Typhoon is a Chinese cyber espionage operation targeting telecommunications and critical infrastructure in Norway. The Chinese intelligence services have improved efforts to collect intelligence and map Norwegian digital infrastructure and are exploiting collaborative research projects to bolster military and security capabilities. The campaign allowed attackers to intercept communications linked to senior political figures during the 2024 U.S. presidential race. PST indicated that while China dominates the cyber threat picture, Russia remains the principal overall threat to Norway, conducting espionage, mapping critical infrastructure, pressuring Ukrainian refugees, covert intelligence with civilian vessels, and sabotage risks. Russian intelligence has monitored military targets and allied activities in Norway for many years. PST expects more Russian cyber operations and influence campaigns in 2026 as part of Moscow's broader intelligence efforts. Iranian intelligence is also expected to conduct espionage and influence operations, potentially targeting Western interests via property damage, assassinations, terrorist acts, or destructive cyber operations. The report emphasizes the need for closer cooperation between authorities and the private sector, particularly critical infrastructure operators, due to the blending of cyber operations with traditional espionage and influence campaigns.
The article explicitly attributes aggressor activities to Chinese, Russian, and Iranian intelligence services conducting hybrid cyber espionage and influence operations targeting Norway. It also discusses Norwegian authorities' defensive measures and threat assessments, supporting dual classification with high confidence.
Add a source URL for enrichment
Prefer one-click submissions? Install the HWT Chrome extension from the Web Store. Get extension .