Canada says telcos were breached in China-linked espionage hacks

Recent reports from the Canadian government and the FBI reveal that telecommunications companies in Canada have fallen victim to cyberattacks attributed to the hacking group known as Salt Typhoon, which is believed to have connections to the Chinese government. In an advisory released late Friday, officials confirmed that at least one unnamed Canadian telecom was compromised in mid-February, with hackers exploiting three Cisco routers to facilitate covert data collection from the affected network. The investigation indicates that Salt Typhoon's activities extend beyond just the telecommunications sector, suggesting a broader campaign of espionage. This group, which has been operational since at least late 2024, has previously targeted major U.S. telecommunications providers and data centers as part of an extensive intelligence-gathering effort focused on high-ranking U.S. officials. Security experts warn that Salt Typhoon is one of several Chinese hacking entities that may be positioning themselves in anticipation of potential military actions against Taiwan by 2027. The joint advisory from Canadian and U.S. authorities predicts that such cyber threats will likely continue to escalate, with hackers expected to intensify their focus on Canadian organizations over the next two years.