Archive — US — techcrunch
Canada says telcos were breached in China-linked espionage hacks
The Canadian government and FBI reported cyberattacks on telecommunications firms attributed to the China-backed group Salt Typhoon, which intruded at least one telco in February 2023, collecting data via hacked Cisco routers. This group's activities extend beyond telecommunications and are part of a broader espionage campaign, possibly in preparation for future geopolitical events, including a potential invasion of Taiwan by 2027.
Key points
- 1. The Canadian government and FBI confirmed cyberattacks on Canadian telcos by the group Salt Typhoon.
- 2. At least one unnamed Canadian telco was hacked in mid-February 2023.
- 3. Hackers manipulated Cisco routers to covertly collect traffic from the network.
- 4. The targeting by Salt Typhoon is wider than the telecom sector, affecting various industries.
- 5. The group was previously active against U.S. companies, indicating a broader espionage strategy.
- 6. The threat of Salt Typhoon is expected to continue targeting Canadian organizations over the next two years.
- 7. Salt Typhoon may be preparing for geopolitical tensions, especially concerning Taiwan by 2027.
Why it matters
- This incident highlights the growing concern of state-sponsored cyber espionage, particularly from China, as technology and national security intersect.
- In 2025, trends include increasing cybersecurity measures in organizations, greater focus on protecting critical infrastructure, and significant realignment of geopolitics in technology sectors.
The ongoing threat posed by Salt Typhoon represents a critical concern for national security and the integrity of telecommunications, signaling the urgency for enhanced cybersecurity strategies to mitigate future attacks.