Archived

• Notorious hacking group Salt Typhoon has likely been targeting Telecom orgs
• Researchers identified tactics previously used by the group
• Salt Typhoon breached up to 8 US telecom networks in a huge cyber-espionage campaign

[…]

A new report from Darktrace claims the [Chinese hacking group Salt Typhoon] has been observed, “targeting global infrastructure using stealthy techniques such as DLL sideloading and zero-day exploits.”

The early stage intrusion activity detected mirrors previous Salt Typhoon tactics, such as the prolific attacks on up to 8 different telecom organizations in a far reaching and potent multi-year campaign which resulted in the group stealing information from millions of American telecom customers using a high severity Cisco flaw to gain access and eventually collect traffic from the networks devices were connected to.

[…]