Skip to Content

Chinese hackers have compromised a broader spectrum of U.S. telecommunications firms than previously reported.

In a significant escalation of cyber-espionage activities, Chinese hackers have compromised a broader spectrum of U.S. telecommunications firms than previously reported. The Wall Street Journal revealed that, in addition to earlier known breaches, companies such as Charter Communications, Consolidated Communications, and Windstream have fallen victim to these cyber intrusions.

Scope of the Breach

The hacking group, identified as Salt Typhoon and linked to China's Ministry of State Security, exploited vulnerabilities in unpatched network devices from security vendor Fortinet and compromised large network routers from Cisco Systems. This allowed them to infiltrate the networks of major U.S. telecom providers, including AT&T, Verizon, Lumen Technologies, and T-Mobile.

China's Response

The Chinese government has denied involvement in these cyber activities, accusing the United States of disseminating disinformation. Despite these denials, the breadth and depth of the intrusions have raised serious concerns among U.S. officials and cybersecurity experts.

Potential Risks

U.S. National Security Adviser Jake Sullivan informed telecommunications and technology executives in a confidential meeting in 2023 that Chinese hackers had acquired the capability to disable critical U.S. infrastructure, including ports and power grids, at will. This revelation underscores the potential risks posed by such deep infiltrations into national infrastructure.

Current Status

While companies like AT&T and Verizon have stated that their networks are now secure, and others like Lumen and T-Mobile report having contained the attacks, the incident has prompted a reevaluation of cybersecurity measures across the industry. The U.S. government is also considering further actions to bolster defenses against such sophisticated cyber threats.

Reference:

https://www.reuters.com/business/media-telecom/chinese-hack-us-telecoms-compromised-more-firms-than-previously-known-wsj-says-2025-01-05/

https://www.reuters.com/technology/cybersecurity/us-adds-9th-telcom-list-companies-hacked-by-chinese-backed-salt-typhoon-2024-12-27/

Chinese hackers have compromised a broader spectrum of U.S. telecommunications firms than previously reported.
USOC Inc., USOC Security January 7, 2025
Share this post
Archive
Proof-of-Concept Exploit for CVE-2024-49113 - Windows Server LDAP Vulnerability