Senate Intelligence Committee Chairman Mark Warner says China-linked Salt Typhoon group listened to phone calls and read texts by hacking US telecom networks
https://www.nytimes.com/... Bluesky: @anarcish.bsky.social : For the entire history of information technology security experts have warned that once you make a back door to allow the government to legally access data, that back door becomes a vulnerability anyone can exploit — Sure enough now anyone with a team of hackers can get in — gizmodo.com/china-wireta... Casper Wichmann / @wichmann.bsky.social : “The hackers were able to listen to phone calls and read text messages, reportedly exploiting the system U.S. authorities use to wiretap Americans in criminal cases. The worst part? The networks are still compromised and it may take incredibly drastic measures to boot them from U.S. systems.” Martin / @mshelton.bsky.social : “End-to-end encrypted communications such as those on the Signal platform are believed to be protected, officials said.” — It sounds like you're *almost* getting to the right answer..! www.washingtonpost.com/national- sec... Johan Vermij / @vermij.org : Chinese APT Salt Typhoon penetrated deeply into US telecoms and used stolen passwords to focus mostly on the system that taps telephone conversations and texts under court orders www.nytimes.com/2024/11/21/u... Matthew Kupfer / @matthewkupfer.bsky.social : Very alarming news about how #China penetrated the US telecom system. “We have to let the American people know this,” Senate Intelligence Committee Chairman Mark Warner said. “Folks need to know.” www.nytimes.com/2024/11/21/u... X: Lionel Barber / @lionelbarber : Most under-covered story bar none. Top senator calls Salt Typhoon 'worst telecom hack in our nation's history'. US Intelligence services appalled. Now suggestions that any American with a mobile phone is vulnerable https://www.washingtonpost.com/ ... Shashank Joshi / @shashj : 'The Chinese government espionage campaign that has deeply penetrated more than a dozen U.S. telecommunications companies is the “worst telecom hack in our nation's history — by far,” a senior U.S. senator told The Washington Post' https://www.washingtonpost.com/ ... Alexei Bulazel / @0xalexei : When the nation needs it most, where is law enforcement-driven response to the Salt Typhoon cyber threat? Instead of punching back - or even cleaning the situation up - the Adults give us press releases, testimony, proposals of a report by DHS (wrong agency), and now regulation Richard Blumenthal / @senblumenthal : As shown by my hearing Tuesday, conflicts of interest enable & embolden China's widening spying & espionage. Hidden in plain sight, corporate actors are putting profits above our national security & economic wellbeing—exposing our data & systems to Chinese infiltration. Ellen Nakashima / @nakashimae : Sen. Mark Warner, chairman of the Senate Intelligence Committee, calls Salt Typhoon “worst telecom hack in our nation's history” The Chinese state-affiliated hackers moved from telco network to another. They listened in real-time to calls. 1/ https://www.washingtonpost.com/ ... @arekfurt : Finally, some useful technical details here on the Salt Typhoon PRC telecom hacks. Wiretap collection systems themselves appear to have not been compromised. OTOH, as many suspected the scope of contact log theft seems to be in the millions of users. https://www.washingtonpost.com/ ... [image] @gizmodo : The astonishing breach will soon be Trump's problem. https://gizmodo.com/... J.M. Hamilton / @jmhamiltonblog : The Salt Typhoon telecom breach makes Colonial Pipeline and SolarWinds — major cyberattacks linked, respectively, to Russian-speaking criminals and to the Russian government — “look like child's play,” Warner said. [image] Eric Geller / @ericgeller : “Though fewer than 150 victims have been identified and notified by the FBI — most of them in the D.C. region, the records of people those individuals have called or sent text messages to run into the ‘millions,’ [@MarkWarner] said, “and that number could go up dramatically.'” Sreemoy Talukdar / @sreemoytalukdar : Chinese intelligence group ‘Salt Typhoon’ hacked deep into US telecom system and pulled off an audacious heist. It may have been able to monitor conv. held by (among others) Trump and Vance. I found the highlighted parts most interesting. https://www.nytimes.com/... [image] LinkedIn: Shannon Brandao : 😶 👉 It's the worst #hack in the US #history, according to Senator Mark Warner (D-VA). … Nick Andersen : If only some group of people had been saying years ago that the Chinese were pre-positioning themselves within our critical infrastructure … Richard Staynings : If it weren't for the fact that western consumers are literally propping up the broken and planned PRC economy, and consequently the employment … Michael Shoebridge : Details emerging about the massive compromises of US telcos by Chinese espionage & hacking outfit ‘Salt Typhoon’ show real time listening to Americans' phone calls … Forums: r/espionage : CCP Wiretaps Americans in 'Worst Hack in Our Nation's History' r/AntiTrumpAlliance : China Wiretaps Americans in 'Worst Hack in Our Nation's History' r/uspolitics : China Wiretaps Americans in 'Worst Hack in Our Nation's History' r/somethingiswrong2024 : China Wiretaps Americans in 'Worst Hack in Our Nation's History' BeauHD / Slashdot : China Wiretaps Americans in 'Worst Hack in Our Nation's History'
Context & Ripple Effects
Earlier reporting had tied Salt Typhoon’s access to major US ISP networks to possible exposure of wiretap systems; this account raises the reported impact from potential system access to interception of communications. The initial ISP-network breach reports and accounts that attackers retained access to broadband-network segments make the incident a telecom-infrastructure security problem, not a one-off data theft.
The significance is the overlap between carrier networks and systems used for lawful surveillance: a compromise of that boundary can expose both communications and sensitive government-facing capabilities.
First-order effects
- US telecom operators implicated in the intrusion must treat wiretap-related environments and associated call/text data as potentially compromised, alongside the broader carrier networks.
- Investigators and affected government users face an urgent need to determine what communications were accessed and whether attacker access remains active.
Second-order effects
- Carriers will face pressure to segment and harden lawful-access systems from operational networks, while law-enforcement agencies may need to reassess the security assumptions behind their telecom access.
- The reported depth of access increases the value of cross-carrier incident coordination: later identification of a ninth affected telecom company suggests the remediation scope can extend beyond the first named operators.
Third-order effects
- If telecom surveillance interfaces remain high-value entry points, critical-infrastructure security will increasingly be judged by the security of shared administrative and government-access systems, not only consumer-facing services.
- The episode reinforces a broader shift toward treating communications networks as geopolitical attack surfaces, with tougher expectations for carrier resilience and visibility into third-party access likely if this pattern persists.
The trend: State-linked cyber activity is targeting the control layers of essential communications infrastructure, where one compromise can yield both operational access and intelligence value.