In a recent security development, U.S. telecom giant T-Mobile discovered efforts by cybercriminals to breach its network. However, the company assured that no sensitive information was accessed during these attempts. According to Jeff Simon, T-Mobile's Chief Security Officer, the intrusions were traced back to a wireline provider's network. "We have not previously encountered attempts of this nature," he stated. T-Mobile's security measures successfully thwarted these incursions, preventing any service disruption or data breaches.
In response, the company has severed its connection with the unidentified provider's network and shared its findings with the U.S. government. In an interview with Bloomberg, Simon elaborated on the attack techniques, revealing that the intruders employed network discovery commands aimed at mapping out T-Mobile's network structure. The attack was contained before it could advance further into the system. Notably, T-Mobile is the first telecom company to publicly disclose such an incident.
This event follows reports of a China-associated cyber espionage group named Salt Typhoon (also known as Earth Estries, FamousSparrow, GhostEmperor, and UNC2286), which has targeted several U.S. telecom firms, including AT&T, Verizon, and Lumen Technologies, as part of espionage activities. Simon highlighted, "Our defenses functioned as intended, thanks to our multi-layered network architecture, continuous monitoring, collaboration with cybersecurity specialists, and rapid response. This stopped the attackers and protected our customers' data." He also noted that different providers might be experiencing varying levels of success in handling such threats.