Salt Typhoon Continues Telecom Attacks Despite US Sanctions

Despite US sanctions, the Chinese government-linked hacking group Salt Typhoon continues its attacks on telecommunication providers, according to Recorded Future. Five telecom firms were breached between December 2024 and January 2025, including a US affiliate of a major UK provider, and companies in Italy, South Africa, and Thailand. Salt Typhoon exploited vulnerabilities in Cisco devices and conducted reconnaissance on Myanmar's Mytel. Universities were also targeted, possibly for research access. While the US Treasury sanctioned Sichuan Juxinhe Network Technology, linked to Salt Typhoon, Recorded Future expects the attacks to persist.