China-Linked Hackers Target U.S. Telecommunications

Chinese state-sponsored hackers, notably the group known as Salt Typhoon, have conducted extensive cyber-espionage operations targeting U.S. telecommunications infrastructure. Below is a summary of key articles detailing these incidents, each accompanied by a link to the original source.

Chinese Hackers Evolve from Corporate Theft to Military Disruption

Chinese hackers have advanced from stealing corporate secrets to possessing the capability to disrupt U.S. infrastructure, including ports and power grids. Since 2019, groups like Volt Typhoon have infiltrated various U.S. infrastructure targets to impede America's military response. Another group, Salt Typhoon, penetrated U.S. telecom networks, accessing data and communications of high-profile figures, including government officials. These activities highlight China's preparation for potential geopolitical conflicts, notably over Taiwan.

The Wall Street Journal

Chinese Hackers Breach U.S. Telecom Networks, Accessing Data of Over 1 Million Individuals

Chinese hackers, associated with the group Salt Typhoon and linked to Chinese intelligence, infiltrated U.S. telecom networks, including Verizon and AT&T. The intrusion, which began in mid-2023 and lasted 18 months, allowed the hackers to collect data on over 1 million individuals, including calls and phone lines associated with high-profile officials like President-elect Donald Trump and Vice President-elect J.D. Vance. Despite detection, the hackers altered their tactics, complicating efforts to remove them from the systems.

New York Post

Chinese Hack of U.S. Telecoms More Extensive Than Previously Known

A Chinese hacking campaign compromised more U.S. telecommunications companies than initially reported, including Charter Communications, Consolidated Communications, and Windstream. Hackers exploited unpatched network devices from security vendor Fortinet and compromised large network routers from Cisco Systems. In addition to infiltrating AT&T and Verizon, the hackers breached networks belonging to Lumen Technologies and T-Mobile. China has denied such actions, accusing the United States of disinformation.

Reuters

China Protests U.S. Sanctions Over Alleged Role in Hacking

China has criticized U.S. sanctions imposed on Beijing-based cybersecurity firm Integrity Technology Group for alleged involvement in multiple hacking incidents targeting U.S. infrastructure. The Chinese Foreign Ministry and the company deny the accusations, calling them baseless and defamatory. The U.S. Treasury cited hacking campaigns like Flax Typhoon, attributed to China, as the reason for sanctions. U.S. officials are also dealing with the consequences of another cyberespionage campaign known as Salt Typhoon, which compromised the communications of numerous Americans and telecommunications companies.

AP News

U.S. Sanctions Chinese Cyber Group for Alleged Hacking Activities

The United States has sanctioned China's Integrity Technology Group, accusing it of operating the hacking group "Flax Typhoon" under Beijing's direction to target critical infrastructure in the U.S. and abroad. The U.S. State Department described Integrity Tech as a major Chinese government contractor closely linked to the Ministry of State Security. Chinese authorities have rejected these allegations as baseless. This action is part of ongoing scrutiny of various Chinese cyberespionage actors, including groups such as "Volt Typhoon" and "Salt Typhoon," both of which have reportedly targeted sensitive sectors.

Reuters

White House Confirms Chinese Hacking Campaign Impacted Multiple U.S. Telecom Firms

A top White House official stated that at least eight U.S. telecom firms and dozens of nations have been impacted by a Chinese hacking campaign. The campaign allowed Beijing to access private texts and phone conversations of an unknown number of Americans. Federal authorities confirmed that hackers linked to China targeted the phones of then-presidential candidate Donald Trump and his running mate, Sen. J.D. Vance, along with people associated with Democratic candidate Vice President Kamala Harris.

AP News

FBI Confirms China-Backed Hackers Breached U.S. Telecom Giants

The U.S. government has confirmed that hackers with links to China breached multiple U.S. telecommunication service providers to access the wiretap systems used by law enforcement to monitor communications. This breach allowed the hackers to intercept surveillance data intended for American law enforcement agencies.

Yahoo Finance

Chinese Hackers Used Telecom Access to Geolocate Millions of Americans

A Chinese hacking group dubbed Salt Typhoon infiltrated U.S. telecommunication providers and used their covert access to steal a trove of Americans’ cell phone records and listen in on the conversations of senior U.S. political figures. Investigators say they first detected Salt Typhoon’s activities earlier this year.

Politico

China-Linked Hackers Breach U.S. Internet Providers in 'Salt Typhoon' Cyberattack

Chinese government hackers penetrated U.S. internet providers to spy on private communications. The group, known as Salt Typhoon, has been conducting cyber espionage campaigns, particularly against the United States, focusing on counterintelligence targets and data theft of key corporate intellectual property.

Wikipedia