U.S. national security authorities express concern as Chinese cybercriminals breach American telecommunications corporations.
American investigators suspect the cybercriminals might have gained access to requests for wiretap warrants, as reported by two anonymous sources. However, officials are still working to determine the extent of data the hackers might have obtained. Telecom giants AT&T, Verizon, and Lumen are among the potential targets, according to these sources.
The hacking incident has raised concerns about potential damage to national security. This is the latest in a series of advanced cyber-attacks targeting US federal agencies, which have been linked to China. The situation comes at a time of heightened tension between Washington and Beijing over cyber-espionage and other critical national security concerns.
US telecom companies play a significant role in maintaining internet and phone communication infrastructure. law enforcement agencies often request access to specific data through warrants for criminal and national security investigations.
Given the sensitive nature of some of these investigations, they would be of interest to China. In recent years, Chinese government agents have faced charges in the US for allegedly harassing Chinese nationals in the US and hacking political dissidents and American companies.
AT&T and Lumen chose not to comment, while Verizon did not respond to multiple requests for comment.
Both the Department of Justice and the FBI declined to comment.
The Chinese Embassy in Washington D.C. denies the involvement of Beijing-backed hackers in breaching US telecom firms, labeling such information as a misrepresentation of facts. The Embassy's spokesperson, Liu Pengyu, accused the US of exploiting cybersecurity issues to tarnish China's reputation.
The Wall Street Journal originally documented the hacking activity.
US authorities have shared details of the Chinese hacking campaign with the House and Senate Intelligence Committees, two sources confirmed. Cybersecurity experts from Microsoft and Google-owned Mandiant have been aiding in the investigation.
Those investigating the hacks have been impressed by the hackers' mastery, determination, and ability to penetrate computer networks. The specific Chinese hacking team believed to be involved is known in the cybersecurity industry as Salt Typhoon.
However, the Chinese government reportedly has numerous other hacking teams at its disposal, capable of conducting espionage or disrupting computer networks, according to US officials and private experts. FBI Director Christopher Wray reported that Chinese government-backed hackers outnumber FBI cyber professionals by a ratio of 50 to 1.
Another Chinese government-backed hacking group has reportedly been lurking in US transportation and communication networks, awaiting an opportunity to disrupt any potential US response to a potential Chinese invasion of Taiwan, US officials have suggested.
Last year, yet another Chinese group reportedly breached the unclassified email accounts of senior US diplomats ahead of a high-profile visit by Secretary of State Antony Blinken to China, according to CNN.
In response to detailed US government allegations, China has increasingly accused the US government of carrying out cyberattacks against Chinese organizations.
Cyber attacks and information operations often serve as a contentious topic in bilateral meetings. During their meeting in California last year, Chinese leader Xi Jinping assured US President Joe Biden that China would not interfere in the 2024 presidential election, as previously reported by CNN.
The cyberattack on US telecom companies could potentially provide insight into Chinese interest in politics, given their alleged targeting of warrant requests. The sensitive nature of these investigations, involving national security concerns, makes them of interest to any powerful nation.
