Canada Telcos Hacked: China-Linked Espionage | Cyber Security News

Cybersecurity Alert: Canadian Telecoms Targeted by China-Linked Hackers

Both the Canadian government and the Federal Bureau of Investigation (FBI) have confirmed knowledge of ongoing malicious cyber activities directed at telecommunications firms throughout Canada.

These intrusions have been directly linked to the hacking group known as Salt Typhoon, which is believed to be supported by the Chinese government.

Details of the Recent Breach

A joint advisory released Friday details that at least one Canadian telecommunications company experienced a security breach in February of this year.

During this incident, attackers successfully compromised three Cisco routers, enabling them to surreptitiously gather network traffic.

Broader Targeting Scope

Investigations conducted by both Canadian and U.S. authorities indicate that Salt Typhoon’s objectives extend beyond the telecommunications industry.

The group’s targeting strategy appears to encompass a wider range of organizations and sectors.

Salt Typhoon’s History and Objectives

Salt Typhoon has been actively operating since at least late 2024, initially focusing on major U.S. telephone companies and internet service providers.

More recently, their activities have expanded to include datacenter hosts.

This broad campaign is understood to be part of a larger intelligence-gathering effort, specifically aimed at collecting information on high-ranking U.S. government officials.

Salt Typhoon is considered one of several China-affiliated hacking groups potentially preparing for a possible Chinese invasion of Taiwan, anticipated by 2027.

Future Threat Assessment

The joint advisory from Canada and the FBI warns that Salt Typhoon will “almost certainly” continue to target Canadian entities for at least the next two years.

Organizations are urged to remain vigilant and implement robust cybersecurity measures to defend against potential attacks.

Continued monitoring and proactive threat detection are crucial in mitigating the risks posed by this sophisticated hacking group.