Signal
Submitted
Feb 6, 2026, 17:54 UTC
Norwegian intelligence confirms Chinese state-sponsored Salt Typhoon cyber espionage campaign compromised Norwegian network devices, with Russia and Iran also active threats.
On February 6, 2026, the Norwegian Police Security Service (PST) publicly disclosed that the Chinese state-sponsored espionage campaign known as Salt Typhoon compromised network devices in Norwegian organizations. The PST's annual threat assessment for 2026 named China as the primary cyber threat actor in Norway, exploiting telecommunications and critical infrastructure. China is systematically exploiting collaborative research projects to bolster military and security capabilities. The PST also reported Russian intelligence remains a significant security threat through espionage, covert intelligence using civilian vessels, and influence activities, while Iranian services are also expected to conduct intelligence and influence operations. Norway faces pressure from multiple foreign intelligence services amid a tense geopolitical environment in Europe. The PST urged increased cooperation between authorities and private sector operators of critical infrastructure to defend against hybrid espionage campaigns.
Confidence: High
The article explicitly describes hostile aggressor activities by Chinese, Russian, and Iranian intelligence targeting Norway’s cyber and critical infrastructure. It also highlights Norway’s defense and intelligence agencies’ preparations and warnings, indicating both aggressor actions and defense responses.
Source URL
https://therecord.media/news/influence-operations
Source reliability
C
Info credibility
3
Event time
Feb 6, 2026, 00:00 UTC
Event time confidence
unknown
Location
Cyberspace
Primary actor
Salt Typhoon
Country
Norway
Countries
Norway
Tags
Salt Typhoon, Norway, China, Russia, Iran, offensive cyber operations, Telecommunications, Critical infrastructure, Intelligence operations
Nodes
Node 1: Borders, Node 2: 5th Column, Node 3: Political Disruptions
Signal
Submitted
Feb 6, 2026, 17:54 UTC
Norwegian intelligence confirms Chinese state-sponsored Salt Typhoon cyber espionage campaign compromised Norwegian network devices, with Russia and Iran also active threats.
On February 6, 2026, the Norwegian Police Security Service (PST) publicly disclosed that the Chinese state-sponsored espionage campaign known as Salt Typhoon compromised network devices in Norwegian organizations. The PST's annual threat assessment for 2026 named China as the primary cyber threat actor in Norway, exploiting telecommunications and critical infrastructure. China is systematically exploiting collaborative research projects to bolster military and security capabilities. The PST also reported Russian intelligence remains a significant security threat through espionage, covert intelligence using civilian vessels, and influence activities, while Iranian services are also expected to conduct intelligence and influence operations. Norway faces pressure from multiple foreign intelligence services amid a tense geopolitical environment in Europe. The PST urged increased cooperation between authorities and private sector operators of critical infrastructure to defend against hybrid espionage campaigns.
Confidence: High
The article explicitly describes hostile aggressor activities by Chinese, Russian, and Iranian intelligence targeting Norway’s cyber and critical infrastructure. It also highlights Norway’s defense and intelligence agencies’ preparations and warnings, indicating both aggressor actions and defense responses.
Source URL
https://therecord.media/news/influence-operations
Source reliability
C
Info credibility
3
Event time
Feb 6, 2026, 00:00 UTC
Event time confidence
unknown
Location
Cyberspace
Primary actor
Salt Typhoon
Country
Norway
Countries
Norway
Tags
Salt Typhoon, Norway, China, Russia, Iran, offensive cyber operations, Telecommunications, Critical infrastructure, Intelligence operations
Nodes
Node 1: Borders, Node 2: 5th Column, Node 3: Political Disruptions