Chinese hacker group 'Salt Typhoon' targets Trump and other US presidential candidates

In a recent cyberattack linked to Chinese espionage group 'Salt Typhoon,' sophisticated hacking attempts reportedly targeted the communication devices of high-profile US presidential candidates, including former President Donald Trump and his running mate JD Vance.

The cyber infiltration also extended to other key figures in the 2024 race, such as Vice President Kamala Harris and her running mate Tim Walz, according to a report by The New York Times.

Salt Typhoon, a designation assigned by Microsoft's cybersecurity team, represents a group of state-backed hackers based in China.

Microsoft labels Chinese cyber groups with “typhoon” names, distinguishing them from cyber actors in other nations. The prefix "salt" here indicates the group’s specialized focus on intelligence gathering rather than more conventional cybercrimes like data theft or financial fraud. Salt Typhoon’s activities are allegedly aimed at collecting sensitive intelligence from high-value targets in the US, focusing especially on political figures and their close contacts.

The hack reportedly compromised telecommunications networks, potentially breaching major providers like Verizon. Federal agencies are investigating the scope of the incident, working to determine whether any sensitive data was extracted. Rich Young, a Verizon spokesperson, acknowledged the intrusion attempt, emphasizing the complexity of countering such attacks by state-sponsored actors.

Federal authorities are treating the breach with urgency. The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have jointly stated that they are actively engaged in a coordinated response to counter unauthorized access and are collaborating with affected telecommunications companies to bolster cybersecurity defenses. "The FBI and CISA immediately notified affected companies and provided technical assistance, while sharing relevant data to help other potential targets,” the agencies announced.

One significant concern is that the hackers may have accessed key metadata, which, in intelligence circles, can be as informative as direct communication content. Metadata like call times, frequencies, and connection patterns can reveal critical insights into the relationships and strategies of prominent figures in US political circles, particularly as the 2024 election approaches.