threatintel
actor tracker
Salt Typhoon
Advisoryseverity: Critical2024-12-04

CISA + partners issue Salt Typhoon defender guidance to telecom sector

published by CISA
Actor
Salt TyphoonCN · ChinaAPT

PRC state-backed actor responsible for the 2024 intrusions into U.S. commercial telecommunications providers — among the most consequential telecom-targeted operations on the public record. Operates…

Summary

CISA, NSA, FBI, and Five Eyes partners released joint guidance to U.S. and allied communications-infrastructure operators on hardening against the PRC-attributed Salt Typhoon campaign. Wall Street Journal reporting in early October 2024 had already disclosed compromises at AT&T, Verizon, Lumen, and T-Mobile; Senate Intelligence Chair Mark Warner characterized the campaign as 'the worst telecom hack in our nation's history,' citing access to call metadata, unencrypted SMS, and lawful-intercept systems.

Tags

telecomespionagefive-eyeslawful-intercept

Primary source

cisa.gov

Other Salt Typhoon events