The U.S. National Security Agency (NSA) remains on high alert due to persistent cyber intrusions by Chinese actors into virtually all internet-connected systems and devices. These warnings, focusing primarily on the Chinese-backed “Salt Typhoon” operation, have been issued intermittently over the past year.
A joint cybersecurity advisory, or CSA, was recently disseminated by more than a dozen global law enforcement bodies. This advisory details the operations of state-sponsored threat groups associated with China, spotlighting Salt Typhoon as a major concern.
Also Read: Farewell to a Fashion Icon: Giorgio Armani Dies at 91
The advisory underscores that Salt Typhoon continues to pose a potent threat to global telecommunication providers and other critical infrastructure. The hackers purportedly have the ability to modify routers, thereby ensuring sustained access. The evidence suggests that three Chinese companies have been directly implicated in providing resources and intelligence.
The CSA, aptly titled “Countering Chinese State-Sponsored Actors’ Compromise of Networks Worldwide to Feed Global Espionage System,” offers a comprehensive analysis of the tactics, techniques, and procedures utilized by these cyber intruders. It also provides technical guidance on how to thwart and surveil such attacks.
Chinese-backed cyber breaches are not limited to specific sectors or geographies, but are targeting networks globally, including telecommunications, government, transportation, lodging, and military infrastructure networks.
Cynthia Kaiser, a former government communications systems investigator who monitored hacking for the FBI, was quoted in The New York Times as saying, “I can’t imagine any American was spared given the breadth of the campaign.” She further elucidated that it remains uncertain whether the hackers specifically sought to store data from U.S. residents, or if that was merely an unintended consequence of the heightened hacking activity.
Kaiser noted that the range of systems targeted in the recent spate of attacks is more extensive than some of the earlier Salt Typhoon intrusions, which seemed to focus primarily on individuals with security and government ties. This raises important questions about the true extent and targets of these intrusions.
In a world that’s increasingly dependent on digital systems, vigilance against such intrusions is paramount.
