Numerous Countries Affected by ‘China’ Cyberattack – Americans Advised to Cease Sending Text Messages

   A massive cyberattack, attributed to the hacking group Salt Typhoon, has compromised the telecommunications networks of major US companies, including AT&T, Verizon, and Lumen Technologies. This breach, one of the largest intelligence compromises in US history, has given Chinese officials access to sensitive communications, such as texts and phone calls, from a large number of Americans. The scale of the breach has raised significant concerns, prompting US authorities to advise citizens to use encrypted messaging apps to safeguard their communications.

US officials have indicated that although the breach did not target every single cell phone in the country, it likely affected a considerable number of individuals, particularly those deemed important by the Chinese government. Jeff Greene, the executive assistant director for cybersecurity at the Cybersecurity and Infrastructure Security Agency (CISA), highlighted the enormity of the attack, stating that its full scope is still not clear and that it’s difficult to predict when the damage will be fully mitigated. A senior US official also noted that China’s access to US telecommunications infrastructure is extensive, with the risk of “ongoing compromise” remaining a concern.

In response to the allegations, the Chinese embassy in Washington rejected the accusations, arguing that the US should halt its own cyberattacks against other nations and refrain from using cybersecurity issues to criticize China. The US government has prioritized the investigation into the breach, and President Joe Biden has been briefed several times on the matter. Officials from the White House have assured that they are taking the necessary steps to address the situation and secure US communications networks.

The hackers accessed three types of information, with the first being call records that show phone numbers and the timing of calls, especially focusing on records from Washington DC. The second type of data accessed involved the monitoring of live phone calls of specific targets. Although the FBI has not revealed the number of people affected, both the Trump and Harris presidential campaigns confirmed they were alerted by the FBI about being targets.

The third type of data the hackers accessed relates to the systems used by law enforcement and intelligence agencies to monitor communications. Despite the depth of the attack, Anne Neuberger, a senior White House official, stated that authorities have found no evidence of classified communications being compromised in the breach.

The hack has raised concerns about the vulnerability of the US telecommunications sector and the potential for similar future attacks. Privacy advocates, in light of this attack, have long urged the use of end-to-end encryption for communications. Platforms such as Signal and WhatsApp automatically encrypt both calls and messages, providing better protection against unauthorized access. Google Messages and iMessage are also equipped with end-to-end encryption, but users must enable it manually.

Given the significant implications of the hack, the US government has emphasized the need for enhanced cybersecurity practices to protect personal communications from foreign espionage. The breach underscores the growing risks of cyberattacks targeting critical infrastructure, and officials have expressed the need for swift action to address vulnerabilities within the telecommunications networks. The hacking group’s access to sensitive communication systems raises important questions about the security of data transmitted over networks, especially when dealing with state-sponsored attacks from foreign powers.

As US authorities continue to investigate the extent of the breach, they are working to strengthen cybersecurity measures to prevent future intrusions. The hacking group’s methods and the ability to gain access to private communications have highlighted significant gaps in cybersecurity defenses. While the breach’s full impact is still being assessed, the US government has made addressing the attack a top priority, with an emphasis on securing communications infrastructure and preventing similar incidents in the future.