The two major Chinese hacking operations targeting U.S. critical infrastructure are named Salt Typhoon and Vault Typhoon. These operations have infiltrated systems across ports, pipelines, water treatment systems, and airports, positioning themselves to cause disruption in the event of a conflict, likely over Taiwan.
U.S. officials are alarmed because Chinese hackers are not just stealing data or intellectual property but are infiltrating critical infrastructure systems like pipelines, water sanitation, and airports. They are lying in wait, preparing to disrupt these systems in the event of a conflict, particularly over Taiwan. This represents a shift from traditional cyber espionage to potential cyber warfare.
Chinese hackers exploited unpatched vulnerabilities in aging telecom infrastructure to infiltrate U.S. telecom networks. They hijacked large network routers, enabling them to surveil phone conversations and text messages of government officials, political figures, and others. Major telecom providers like Verizon and AT&T were among the victims.
The U.S. government has dismantled botnets used by Chinese hackers, publicly disclosed critical infrastructure hacking activity, and shared threat intelligence with affected sectors. Additionally, the Biden administration has pushed for minimum cybersecurity mandates in industries like pipelines and aviation, though telecoms have not yet been included in these mandates.
China has repeatedly denied involvement in cyber espionage, dismissing U.S. accusations as fabricated. During a visit by U.S. Secretary of State Antony Blinken, Chinese officials claimed the activities might be the work of criminal ransomware groups and accused the U.S. of similar cyber activities, calling the allegations smears and lies.
The incoming Trump administration faces significant challenges, including addressing the deep and widespread compromises in U.S. telecom networks. While some officials have prioritized deterring China, it remains unclear whether the administration will support mandatory cybersecurity regulations, as Republicans have historically favored voluntary measures over government mandates.
Chinese hackers lying in wait in U.S. critical infrastructure systems signifies a strategic move to prepare for future conflicts, particularly over Taiwan. By maintaining access without immediate disruption, they aim to deter U.S. intervention and potentially unleash chaos by disrupting essential services like power grids, water treatment, and transportation systems during a crisis.
Chinese hackers have vastly increased their efforts in recent years, burrowing into systems at ports, pipelines, water facilities and elsewhere. WSJ reporter Dustin Volz joins host James Rundle to talk about what this means for national security, and how companies such as major telecom providers were hacked) in the first place.
Sign up for the WSJ's free Technology newsletter).
Learn more about your ad choices. Visit megaphone.fm/adchoices)