Norway Under Cyber Attack: China-Linked Salt Typhoon Group Targets Organizations

Norway's Cyber Vulnerability Exposed: A Growing Threat from China-Linked Hackers

Norway, known for its digital resilience, has been targeted by a sophisticated Chinese-linked hacker group, Salt Typhoon, with alarming frequency. The Police Security Service (PST) has issued its 2026 threat assessment, revealing that Norwegian organizations have been specifically targeted by Salt Typhoon, a highly sophisticated hacker group believed to be linked to Chinese intelligence services.

The revelation comes as China continues to assert its global influence through an increasingly sophisticated array of cyber espionage tools and techniques. The relationship between Norway and China has long been marked by tension, from disputes over maritime rights in the Arctic to disagreements on issues like trade policy and human rights. As the Cold War's ideological proxy conflict gives way to a more high-stakes era of technological competition, it is becoming increasingly clear that cyber espionage will play an ever-larger role in the geopolitics of this relationship.

Norway's vulnerability to Salt Typhoon's cyber attacks comes as no surprise to many experts. The country has a long history of prioritizing digital security, with significant investments in cybersecurity infrastructure and research initiatives. However, this vigilance has also made Norway an attractive target for sophisticated adversaries like Salt Typhoon. In 2019, the Norwegian Police Security Service (PST) identified China as one of its top cyber threat actors, alongside Russia and North Korea.

This assessment reflected a growing concern among Norwegian authorities about the increasing sophistication of Chinese cyber espionage efforts. The PST's warning came just days after the arrest of a Chinese national in Norway on suspicion of espionage, highlighting the ongoing tensions between the two countries. Since then, there have been numerous reports of Chinese hackers targeting government agencies, private sector targets, and critical infrastructure worldwide.

The revelation that Salt Typhoon has been targeting Norwegian organizations since at least 2020 serves as a stark reminder of China's increasing assertiveness in the Asia-Pacific region and its growing willingness to use cyber espionage as a tool to advance its strategic interests. The incident also underscores the importance of cybersecurity in international relations, highlighting the need for countries to prioritize cooperation and information-sharing to address this emerging threat.

As tensions between China and Norway continue to escalate, it is essential that the country prioritizes cooperation with international partners to address this growing threat. By working together, countries can develop more effective countermeasures and strengthen their collective resilience against Chinese cyber espionage. The successful implementation of effective countermeasures will require significant investment in cybersecurity research, development, and training programs.

Moreover, Salt Typhoon's targeting of Norwegian organizations reflects the growing global threat landscape. The record cyberattack on 22 Danish power companies, linked to Russian hackers, and the significant ransomware attack on Sweden's sole digital government service provider, demonstrate that no country is immune to cyber threats. These incidents highlight the need for international cooperation and information-sharing to address this emerging threat.

Norway's situation reflects broader global concerns about China's strategic ambitions in the Indo-Pacific region. The Chinese government has been accused of using cyber espionage as a tool to advance its national interests, including gaining access to sensitive information on advanced technologies such as renewable energy, aerospace, and defense systems.

The incident highlights the need for increased cooperation and information-sharing between nations to address this emerging threat. The Nordic region, in particular, may benefit from increased cooperation on cybersecurity matters through initiatives like the Nordic Cybersecurity Cooperation (NCC) initiative. Future outlooks will likely focus on Norway's continued involvement in regional cybersecurity efforts and its prioritization of cooperation with international partners to address the growing threat posed by Chinese cyber espionage groups.

Historical/Geopolitical Context

The incident serves as a reminder of China's increasing assertiveness in the Asia-Pacific region and its growing willingness to use cyber espionage as a tool to advance its strategic interests. This geopolitical rivalry has led to tensions between China and Norway, with disputed maritime rights in the Arctic and differing views on trade policy and human rights.

By working together, countries can develop more effective countermeasures and strengthen their collective resilience against Chinese cyber espionage. The 2026 threat assessment by the Norwegian Police Security Service (PST) serves as a wake-up call for Norway and its regional partners to reassess their collective approach to cyber defense.