Already a subscriber? Make sure to log into your account before viewing this content. You can access your account by hitting the “login” button on the top right corner. Still unable to see the content after signing in? Make sure your card on file is up-to-date.
A top US official has confirmed that a Chinese hacking group has infiltrated at least eight American telecommunications firms in a cyber-espionage campaign targeting senior government officials and political figures.
Something you should know before you read: In the last few years, US officials have been openly sounding the alarm over increasing Chinese state-sponsored cyber attacks targeting critical US infrastructure. One official in particular, FBI Director Christopher Wray, has repeatedly warned that Chinese hackers aim not just to steal sensitive data but also to embed themselves within critical systems, potentially preparing for disruptive attacks designed to delay or neutralize a US military response in the event of a geopolitical crisis, such as a Chinese invasion of Taiwan. Director Wray and other officials have stressed the urgent need to bolster cybersecurity defenses to counter ongoing attacks.
What’s going on now: During a phone call with reporters, Deputy National Security Adviser Anne Neuberger revealed details about a significant cyber-espionage campaign carried out by a Chinese hacking group known as “Salt Typhoon.” The group targeted at least eight major US telecommunications firms and dozens of companies worldwide, focusing on intercepting metadata related to calls, including who was called, when, and where, rather than the content of the conversations. The breach primarily affected senior US government officials and political figures, revealing vulnerabilities in the nation’s telecommunications infrastructure. While the US has not confirmed which companies were impacted, reports suggest that AT&T, Verizon, T-Mobile, and Lumen Technologies were affected.
Neuberger noted that she did not believe classified communication channels had been compromised. Still, she said, “There is a risk of ongoing compromises to communications until US companies address the cybersecurity gaps, and the Chinese are likely to maintain their access.”
China reacts: In a brief statement, China’s embassy in Washington DC disputed the claims from Neuberger and accused the United States of conducting cyberattacks against other countries. The spokeswoman said, “The US needs to stop its own cyberattacks against other countries and refrain from using cyber security to smear and slander China.”
More on Salt Typhoon: Salt Typhoon, a Chinese state-sponsored hacking group, is believed to operate directly under China’s intelligence services. The group specializes in infiltrating critical infrastructure, such as telecommunications networks, with a focus on gathering sensitive data from high-value targets, including government officials, political figures, and corporate executives. Salt Typhoon has been active for several years, using known vulnerabilities rather than novel techniques to breach systems, which aligns with China’s pattern of sustained and targeted cyber campaigns. Beyond the current telecommunications breach, the group has been implicated in attacks on election-related communications and other critical sectors.
