The FBI has released new findings on a long-running cyber campaign that quietly infiltrated major U.S. telecommunications providers and critical infrastructure around the world. The campaign, carried out by a group of hackers linked to the Chinese government, is known as Salt Typhoon.
According to federal officials, the operation has been active since at least 2019. It focused not just on stealing data but on gaining access to sensitive communication systems, including those used for surveillance and law enforcement.
In a new advisory, the FBI, together with cybersecurity officials from other federal agencies, urged companies to review their systems and take steps to detect signs of intrusion. This guidance is meant to help organizations spot malicious activity earlier and protect not just themselves, but the broader infrastructure they’re part of.
A Campaign Hidden in Plain Sight
Salt Typhoon’s operations were designed to go unnoticed. The hackers didn’t use flashy malware or noisy attacks. Instead, they moved quietly through trusted systems, sometimes remaining undetected for years.
Their targets were varied. In addition to telecom providers, the group reportedly accessed systems in the transportation, hospitality, and defense sectors. Much of the activity involved mapping how information moved, who communicated with whom, and where the vulnerabilities were.
What made this campaign stand out was its focus on the plumbing of communication. It went after the infrastructure itself—networks, routers, and intercept systems—not just the data that traveled through them.
Global Impact and Growing Pressure
The FBI says Salt Typhoon affected organizations in more than 80 countries. While the United States was a central focus, the group’s reach extended into allied nations as well.
This week’s announcement comes alongside growing pressure from international governments. Several allied countries have joined the U.S. in publicly calling out Chinese companies believed to have supported the hacking campaign.
There is a growing sense that these kinds of operations are no longer isolated events. They reflect a broader strategy—one that blends intelligence gathering with digital control over global systems.
A Continuing Effort
Officials say the release of this advisory marks a milestone in the Salt Typhoon FBI investigation, but not the end. The group is still active. The risks are still present. And the work to close these gaps continues.
The FBI emphasized that their progress in uncovering Salt Typhoon was made possible by organizations that came forward early and shared what they were seeing. That level of cooperation is becoming increasingly vital in defending against attacks that move across sectors and borders.
