Salt Typhoon Telecom Espionage Campaign — Ongoing

Espionage campaign · Sep 15, 2024
Critical STIX 2.1 MISP
Summary

Chinese state-sponsored group Salt Typhoon (also tracked as GhostEmperor/FamousSparrow) continues to maintain persistent access to major US, Southeast Asian, and Australian telecommunications networks. The campaign, first publicly disclosed in late 2024, has been confirmed to compromise call detail records and lawful intercept systems across at least 9 major carriers. As of May 2026, incident response is ongoing at several ASEAN-region telecoms. CISA has issued updated advisories recommending encrypted communications for government officials.

Sources
Attribution
Salt Typhoon (China MSS)
Where
PH PhilippinesTH ThailandAU AustraliaID IndonesiaTW TaiwanJP Japan
Also: United States
Sectors: Telecommunications, Government, Defense
EU relevance
Medium
Hit defense in Australia, where the EU has Peace & Security projects; 9 more such overlaps
Graded by rules: EU member states affected, EU response, EU sanctions, EU projects in the sector hit.