Hackers linked to the Chinese government have broken into the networks of US internet providers like AT&T, Verizon and Lumen, which owns CenturyLink and Quantum Fiber, according to a new report from The Wall Street Journal.
Investigators are referring to the hack as “Salt Typhoon." It was initially reported last week with few details, but the new Wall Street Journal article revealed that the attack used the same systems as the federal government for court-authorized wiretapping. Investigators are still determining the scope of the attack, but some of the country's largest internet providers -- and their millions of customers -- were impacted.
"Compromising ISPs wiretaps is probably one of the most complicated and bold cyber operations a nation state actor can execute, as it deals with extremely sensitive data and touches on both law enforcement and potential intelligence data," Ram Elboim, CEO at the global cyber security consulting firm Sygnia, told CNET.
Locating local internet providers
The Salt Typhoon attack comes just a week after the FBI announced that it took down another attack backed by the Chinese government known as “Flax Typhoon,” which affected a network of 200,000 internet-connected cameras, routers and other devices.
This type of Chinese hacking operation has long been a regular occurrence, but the “skill and sophistication” has accelerated in recent years, intelligence officials told the Journal.
Locating local internet providers
“The cyber threat posed by the Chinese government is massive,” said FBI Director Christopher Wray. “China’s hacking program is larger than that of every other major nation, combined.”
China has consistently denied any involvement with these attacks. Liu Pengyu, a spokesman for the Chinese embassy in Washington, accused US intelligence agencies of “secretly collaborating to piece together false evidence” linking the Chinese government to the groups behind the Salt Typhoon hack.
How to protect yourself from data leaks
While there is little evidence that an attack like Salt Typhoon is after the personal information of individual customers, there are some basic steps you should take to protect your personal data. Here’s what CNET experts recommend:
- Change your password regularly: When was the last time you changed your Wi-Fi router’s password? It’s a slightly annoying chore since you’ll have to reconnect all your devices, but it’s an excellent way to shore up your security in the wake of attacks that may have leaked login credentials.
- Sign up for identity theft protection: If you’re concerned about your identity being stolen, these services monitor your credit and banking activity for around $7 to $15 per month.
- Read your credit reports: You’re entitled to a free credit report each week from each of the three major credit bureaus. This will tell you basic information about your credit activity, including if any new accounts are being opened in your name.