Salt Typhoon Espionage Hits Telecoms & Critical Infra

A state-sponsored espionage group known as Salt Typhoon has been systematically targeting global telecommunications infrastructure since at least 2019. The group operates under the direction of a major government but utilizes a network of pseudo-private contractor firms to maintain plausible deniability. By exploiting network edge devices like routers and firewalls, Salt Typhoon establishes deep persistence to harvest sensitive data such as subscriber metadata and call detail records. Their campaigns have successfully compromised major telecom providers and military networks in several allied nations. This hybrid operational model, blending state tasking with outsourced execution, signifies a strategic shift in nation-state cyber espionage.