US Treasury Sanctions Salt Typhoon: The Hacking Group Responsible for Major Telecom Breaches

The U.S. government has recently imposed sanctions on a Chinese organization associated with the notorious hacking group, Salt Typhoon. This group is infamous for executing the largest telecommunications hack in U.S. history, targeting multiple telecom and internet service providers. The sanctions aim to combat cyber threats and strengthen national security.

Sanctions Overview: Targeting Salt Typhoon

On Friday, the Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions against Sichuan Juxinhe Network Technology, a China-based cybersecurity firm. This organization is reportedly linked to the Salt Typhoon hacking group, which has been implicated in a series of high-profile cyberattacks.

Salt Typhoon’s Infiltration of U.S. Telecoms

Salt Typhoon has recently been identified as the perpetrator behind a significant breach affecting at least nine U.S. telecom and internet providers, including major companies like AT&T and Verizon. The implications of this breach are serious, as hackers gained unauthorized access to:

• The private communications of senior U.S. government officials
• Political figures
• Law enforcement systems used for authorized data collection

This access raises concerns about the potential exposure of sensitive information, particularly regarding Chinese targets of U.S. surveillance.

Additional Sanctions Against Cyber Actors

In addition to sanctions against Sichuan Juxinhe, OFAC also targeted Yin Kecheng, a cyber actor based in Shanghai. Yin is linked to a recent massive hack of the U.S. Treasury, which occurred in late December.

Details of the U.S. Treasury Hack

During this cyberattack, hackers exploited a stolen private key from BeyondTrust, a cybersecurity firm specializing in identity access technology. This breach allowed state-backed group Silk Typhoon to infiltrate various departments within the U.S. Treasury, including its sanctions office.

According to OFAC, Yin Kecheng has been involved in cyber activities for over a decade and is associated with China’s Ministry of State Security, which oversees the country’s foreign intelligence operations.

Commitment to Cybersecurity

U.S. Treasury official Adewale O. Adeyemo stated, “The Treasury Department will continue to use its authorities to hold accountable malicious cyber actors who target the American people, our companies, and the United States government.” This statement underscores the U.S. commitment to enhancing cybersecurity and protecting critical infrastructure from foreign threats.

Recent Sanctions Against Cybersecurity Firms

Earlier this month, the U.S. government also sanctioned another cybersecurity company, Integrity Technology Group, due to its alleged connections with the government-backed hacking group known as Flax Typhoon. The Treasury Department indicated that Integrity Technology had been involved in multiple computer intrusion incidents targeting U.S. critical infrastructure.

For more information on cybersecurity measures and updates, visit the U.S. Department of Homeland Security’s Cybersecurity page.