Tag Salt Typhoon

Chinese Hackers Target T-Mobile and Other U.S. Telecoms in Extensive Espionage Operation

T-Mobile, a prominent U.S. telecommunications provider, has acknowledged being targeted by Chinese cyber threat actors aiming to infiltrate its systems to access sensitive data. The perpetrators, identified as Salt Typhoon, have been conducting a prolonged campaign focusing on extracting cellphone communications of individuals considered “high-value intelligence targets.” The extent of…

Read MoreChinese Hackers Target T-Mobile and Other U.S. Telecoms in Extensive Espionage Operation

T-Mobile Uncovers Network Intrusion Attempts from a Wireline Provider

T-Mobile Detects Intrusion Attempts, No Data Breach Confirmed Telecom giant T-Mobile recently announced that it has thwarted attempts by cyber actors to penetrate its networks in the past few weeks. Fortunately, the company confirmed that no sensitive customer data was accessed during these attempts. The intrusion efforts were traced back…

Read MoreT-Mobile Uncovers Network Intrusion Attempts from a Wireline Provider

Cisco Confirms Salt Typhoon’s Exploitation of CVE-2018-0171 to Attack U.S. Telecom Networks

Cisco has disclosed that a Chinese threat actor, identified as Salt Typhoon, successfully infiltrated major U.S. telecommunications companies by exploiting a known vulnerability labeled CVE-2018-0171 and utilizing stolen login credentials. This targeted operation reflects the sophisticated methods employed by adversaries focusing on critical infrastructure. According to Cisco Talos, the group…

Read MoreCisco Confirms Salt Typhoon’s Exploitation of CVE-2018-0171 to Attack U.S. Telecom Networks

Chinese APT Leverages BeyondTrust API Key to Infiltrate U.S. Treasury Systems and Access Sensitive Documents

The U.S. Treasury Department has reported a significant cybersecurity breach that has purportedly provided suspected Chinese threat actors with remote access to some computers and unclassified documents. This incident was publicly disclosed following a communication from BeyondTrust, a third-party software provider of the Treasury, on December 8, 2024, regarding unauthorized…

Read MoreChinese APT Leverages BeyondTrust API Key to Infiltrate U.S. Treasury Systems and Access Sensitive Documents

CISA Alerts on Two Actively Exploited Security Vulnerabilities in Adobe and Oracle Products

Recently, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog by adding two critical security flaws affecting Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM). This action stems from emerging evidence indicating active exploitation of these vulnerabilities. The newly added vulnerabilities are…

Read MoreCISA Alerts on Two Actively Exploited Security Vulnerabilities in Adobe and Oracle Products

RA World Ransomware Attack in South Asia Tied to Chinese Espionage Toolkit

A recent ransomware incident attributed to the RA World group has highlighted a troubling intersection between cyber espionage and financial extortion. In November 2024, an unnamed software and services company in Asia became the target of a sophisticated attack employing a malicious toolset closely associated with Chinese cyber espionage tactics.…

Read MoreRA World Ransomware Attack in South Asia Tied to Chinese Espionage Toolkit

Chinese Hackers Salt Typhoon and UNC4841 Collaborate to Target Critical Infrastructure

Cybersecurity experts from Silent Push have exposed a complex Chinese espionage initiative that intertwines two notable threat actors: Salt Typhoon and UNC4841. This investigation has unveiled a previously hidden network of malicious infrastructure aimed at infiltrating government and corporate networks across more than 80 countries. The analysis identified 45 malicious…

Read MoreChinese Hackers Salt Typhoon and UNC4841 Collaborate to Target Critical Infrastructure

Austrian Interior Ministry Reports Breach of 100 Email Accounts

Cyberwarfare / Nation-State Attacks, Email Security & Protection, Fraud Management & Cybercrime No Law Enforcement Information or Personal Data Compromised, Says Austrian Government Akshaya Asokan (asokan_akshaya) • September 1, 2025 The headquarters of Austria’s Ministry of the Interior in Palais Modena, Vienna. (Image: Wikimedia Commons) The Austrian government has confirmed…

Read MoreAustrian Interior Ministry Reports Breach of 100 Email Accounts