{"id":57772,"date":"2024-11-27T23:44:14","date_gmt":"2024-11-27T23:44:14","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/salt-typhoons-surge-extends-far-beyond-us-telcos\/"},"modified":"2024-11-27T23:44:14","modified_gmt":"2024-11-27T23:44:14","slug":"salt-typhoons-surge-extends-far-beyond-us-telcos","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/salt-typhoons-surge-extends-far-beyond-us-telcos\/","title":{"rendered":"Salt Typhoon’s surge extends far beyond US telcos"},"content":{"rendered":"

The reach of the China-linked Salt Typhoon gang extends beyond American telecommunications giants, and its arsenal includes several backdoors, including a brand-new malware dubbed GhostSpider, according to Trend Micro researchers.<\/p>\n

While the crew has made headlines recently for hacking “thousands and thousands<\/a>” of devices at US telcos, research published on Monday by Trend Micro’s threat intel team suggests Salt Typhoon (which Trend tracks as \u201cEarth Estries\u201d) has also hit more than 20 organizations globally since 2023. These span various sectors, including technology, consulting, chemical and transportation industries, government agencies, and non-profit organizations (NGOs) in the US, the Asia-Pacific region, the Middle East, and South Africa.<\/p>\n

Affected countries include: Afghanistan, Brazil, Eswatini, India, Indonesia, Malaysia, Pakistan, the Philippines, South Africa, Taiwan, Thailand, the US, and Vietnam.<\/p>\n