Salt Typhoon attacks may have hit more US firms than previously thought

Posted by:

Olivia Smith

Mon, 06 Jan

0 Comment

Following the recent Salt Typhoon cyberattacks, new victims of the attack have been identified, including Charter Communications, Consolidated Communications, and Windstream. The Wall Street Journal revealed this information, indicating that Fortinet network devices and vulnerable Cisco large network routers were exploited in the attack due to outdated security software. It is suggested that the attack may have originated in 2023, with the FBI and CISA making a joint statement in October 2024.

Major telecommunication companies such as AT&T, Verizon, Lumen Technologies, and T-Mobile were targeted in the attack, raising concerns about the accessed data. While Lumen and T-Mobile prevented access to sensitive customer information, Verizon reported a limited number of high-profile individuals involved in politics as targets. The attackers also gained access to a ‘lawful interception’ channel used for court-ordered wiretaps, leading to China denying any involvement and accusing the US of misinformation.

Fortinet and Cisco have faced cyber attacks in the past, with outdated firmware on network routers being a common initial access point for attackers. The incident raises concerns about cybersecurity vulnerabilities and the need for updated security measures to protect against such attacks.