China's 'Salt Typhoon' Hacking Group Infiltrates Australia's Critical Infrastructure

Cybersecurity experts warn of long-term espionage threat to national security

Apr. 11, 2026 at 7:10am

Got story updates? Submit your updates here. ›

A highly detailed, glowing 3D illustration of a complex network of fiber-optic cables and server racks, representing the interconnected nature of Australia's critical infrastructure and the looming threat of cyber espionage.As China's 'Salt Typhoon' hacking group infiltrates Australia's vital systems, the threat of covert cyber espionage looms large over the nation's critical infrastructure.NYC Today

A chilling revelation has emerged: China's Salt Typhoon hacking group has likely infiltrated Australia's critical infrastructure, posing a serious threat to national security. Cybersecurity experts believe the group has already compromised multiple sectors across Australia and New Zealand, focusing on long-term espionage rather than quick data theft.

Why it matters

The Salt Typhoon campaign is not about immediate financial gain, but rather a patient, persistent effort to gain a foothold in vital systems. This could allow the Chinese government to access sensitive communications and gain insights into national security strategies, with potentially devastating consequences for Australia.

The details

According to Alastair MacGibbon, a leading cybersecurity expert and former advisor to the Australian Prime Minister, Salt Typhoon has been active since at least 2019 and is the "most effective espionage campaign against the West that we have ever seen." The group is known for quietly infiltrating telecommunications networks, stealing data, and maintaining access that could be used during future conflicts.

  • Salt Typhoon has been active since at least 2019.
  • The FBI has revealed that Salt Typhoon has targeted at least 200 American companies across 80 countries.

The players

Alastair MacGibbon

A leading cybersecurity expert and former advisor to the Australian Prime Minister.

Salt Typhoon

A hacking group believed to be linked to China's Ministry of State Security and People's Liberation Army, known for long-term espionage campaigns targeting critical infrastructure.

Chinese Embassy in Washington

A spokesperson for the Chinese Embassy in Washington has claimed that the US intelligence community is spreading disinformation about Salt Typhoon.

Got photos? Submit your photos here. ›

What they’re saying

“This isn't just about data theft; it's a potential threat to national security, and it's happening right now.”

— Alastair MacGibbon, Cybersecurity expert and former advisor to the Australian Prime Minister

“Imagine the implications: They could be listening in on critical communications, potentially gaining insights into national security strategies.”

— Alastair MacGibbon, Cybersecurity expert and former advisor to the Australian Prime Minister

What’s next

Five Eyes agencies are aware of the risk and regularly issue advisories with practical guidance for critical infrastructure organizations. This includes reviewing network device logs and employing robust change management processes.

The takeaway

The threat from China's Salt Typhoon hacking group highlights the critical importance of robust cybersecurity measures for Australia's critical infrastructure. Businesses and government agencies must remain vigilant and work closely with security experts to protect against this persistent and sophisticated espionage campaign.