WSJ: Dozens of Countries Hit in Chinese Telecom Hacking Campaign, Top U.S. Official Says
At least eight U.S. telecommunications firms were compromised in the attack, a senior White House official said https://www.wsj.com/politics/national-security/dozens-of-countries-hit-in-ch... Chinese government officials have denied responsibility for the hacking Anne Neuberger, President Biden’s deputy national security adviser for cyber and emerging technology “We believe that the voluntary approach has proved inadequate for the most critical companies that underpin our critical infrastructure. So we want to complement CISA’s efforts with regulatory efforts."
On Wed, Dec 4, 2024 at 12:57 PM Sean Donelan <sean@donelan.com> wrote:
“We believe that the voluntary approach has proved inadequate for the most critical companies that underpin our critical infrastructure. So we want to complement CISA’s efforts with regulatory efforts."
We're still talking about the hack which was caused by the government's regulatory insistence on a "lawful intercept" capability, right? -- William Herrin bill@herrin.us https://bill.herrin.us/
Failing to find a list of providers that were hit. Anyone know more ? I don't see them mentioned. Verizon & AT&T I know of. -- J. Hellenthal The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume.
On Dec 4, 2024, at 14:59, Sean Donelan <sean@donelan.com> wrote:
 At least eight U.S. telecommunications firms were compromised in the attack, a senior White House official said
https://www.wsj.com/politics/national-security/dozens-of-countries-hit-in-ch...
Chinese government officials have denied responsibility for the hacking
Anne Neuberger, President Biden’s deputy national security adviser for cyber and emerging technology
“We believe that the voluntary approach has proved inadequate for the most critical companies that underpin our critical infrastructure. So we want to complement CISA’s efforts with regulatory efforts."
CNN mentioned Lumen. T-Mo? On Wed, Dec 4, 2024 at 5:22 PM J. Hellenthal via NANOG <nanog@nanog.org> wrote:
Failing to find a list of providers that were hit. Anyone know more ? I don't see them mentioned. Verizon & AT&T I know of.
-- J. Hellenthal
The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume.
On Dec 4, 2024, at 14:59, Sean Donelan <sean@donelan.com> wrote:
 At least eight U.S. telecommunications firms were compromised in the attack, a senior White House official said
https://www.wsj.com/politics/national-security/dozens-of-countries-hit-in-ch...
Chinese government officials have denied responsibility for the hacking
Anne Neuberger, President Biden’s deputy national security adviser for
cyber and emerging technology
“We believe that the voluntary approach has proved inadequate for the
most critical companies that underpin our critical infrastructure. So we want to complement CISA’s efforts with regulatory efforts."
I suspect that a gag order has been issued for the other companies, and a cybersecurity incident response team has already been hired and is in place. Joe Klein "inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1) "*I skate to where the puck is going to be, not to where it has been." -- *Wayne Gretzky "I never lose. I either win or learn" - Nelson Mandela On Thu, Dec 5, 2024 at 9:58 AM Jason Iannone <jason.iannone@gmail.com> wrote:
CNN mentioned Lumen. T-Mo?
On Wed, Dec 4, 2024 at 5:22 PM J. Hellenthal via NANOG <nanog@nanog.org> wrote:
Failing to find a list of providers that were hit. Anyone know more ? I don't see them mentioned. Verizon & AT&T I know of.
-- J. Hellenthal
The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume.
On Dec 4, 2024, at 14:59, Sean Donelan <sean@donelan.com> wrote:
 At least eight U.S. telecommunications firms were compromised in the attack, a senior White House official said
https://www.wsj.com/politics/national-security/dozens-of-countries-hit-in-ch...
Chinese government officials have denied responsibility for the hacking
Anne Neuberger, President Biden’s deputy national security adviser for
cyber and emerging technology
“We believe that the voluntary approach has proved inadequate for the
most critical companies that underpin our critical infrastructure. So we want to complement CISA’s efforts with regulatory efforts."
Here is the public Breach Report for T-Mobile. https://firewalltimes.com/t-mobile-data-breaches/ Unable to find AT&T, Verizon or several other companies on the list. Joe Klein "inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1) "*I skate to where the puck is going to be, not to where it has been." -- *Wayne Gretzky "I never lose. I either win or learn" - Nelson Mandela On Thu, Dec 5, 2024 at 3:43 PM Ryan Wilkins <ryan@deadfrog.net> wrote:
There’s been a question about T-Mobile being part of this or not. I have no specific knowledge, but just count the number of times they’ve been hacked in the past (that we know of) and draw your conclusion that they’re part of this.
Ryan Wilkins
On Dec 5, 2024, at 3:38 PM, Joe Klein <jsklein@gmail.com> wrote:
 I suspect that a gag order has been issued for the other companies, and a cybersecurity incident response team has already been hired and is in place.
Joe Klein
"inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1) "*I skate to where the puck is going to be, not to where it has been." -- *Wayne Gretzky "I never lose. I either win or learn" - Nelson Mandela
On Thu, Dec 5, 2024 at 9:58 AM Jason Iannone <jason.iannone@gmail.com> wrote:
CNN mentioned Lumen. T-Mo?
On Wed, Dec 4, 2024 at 5:22 PM J. Hellenthal via NANOG <nanog@nanog.org> wrote:
Failing to find a list of providers that were hit. Anyone know more ? I don't see them mentioned. Verizon & AT&T I know of.
-- J. Hellenthal
The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume.
On Dec 4, 2024, at 14:59, Sean Donelan <sean@donelan.com> wrote:
 At least eight U.S. telecommunications firms were compromised in the attack, a senior White House official said
https://www.wsj.com/politics/national-security/dozens-of-countries-hit-in-ch...
Chinese government officials have denied responsibility for the hacking
Anne Neuberger, President Biden’s deputy national security adviser for
cyber and emerging technology
“We believe that the voluntary approach has proved inadequate for the
most critical companies that underpin our critical infrastructure. So we want to complement CISA’s efforts with regulatory efforts."
I was wrong. Here is a list: https://firewalltimes.com/att-data-breaches/ https://firewalltimes.com/verizon-data-breaches/ https://firewalltimes.com/google-data-breach-timeline/ Over the past 25 years, security researchers worldwide have consistently identified new SS7 vulnerabilities (thank you AT&T) each year. Furthermore, at BlackHat around 2006, a researcher revealed several major vulnerabilities in law enforcement tools, techniques, and technologies. Joe Klein "inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1) "*I skate to where the puck is going to be, not to where it has been." -- *Wayne Gretzky "I never lose. I either win or learn" - Nelson Mandela On Thu, Dec 5, 2024 at 4:06 PM Joe Klein <jsklein@gmail.com> wrote:
Here is the public Breach Report for T-Mobile. https://firewalltimes.com/t-mobile-data-breaches/ Unable to find AT&T, Verizon or several other companies on the list.
Joe Klein
"inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1) "*I skate to where the puck is going to be, not to where it has been." -- *Wayne Gretzky "I never lose. I either win or learn" - Nelson Mandela
On Thu, Dec 5, 2024 at 3:43 PM Ryan Wilkins <ryan@deadfrog.net> wrote:
There’s been a question about T-Mobile being part of this or not. I have no specific knowledge, but just count the number of times they’ve been hacked in the past (that we know of) and draw your conclusion that they’re part of this.
Ryan Wilkins
On Dec 5, 2024, at 3:38 PM, Joe Klein <jsklein@gmail.com> wrote:
 I suspect that a gag order has been issued for the other companies, and a cybersecurity incident response team has already been hired and is in place.
Joe Klein
"inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1) "*I skate to where the puck is going to be, not to where it has been." -- *Wayne Gretzky "I never lose. I either win or learn" - Nelson Mandela
On Thu, Dec 5, 2024 at 9:58 AM Jason Iannone <jason.iannone@gmail.com> wrote:
CNN mentioned Lumen. T-Mo?
On Wed, Dec 4, 2024 at 5:22 PM J. Hellenthal via NANOG <nanog@nanog.org> wrote:
Failing to find a list of providers that were hit. Anyone know more ? I don't see them mentioned. Verizon & AT&T I know of.
-- J. Hellenthal
The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume.
On Dec 4, 2024, at 14:59, Sean Donelan <sean@donelan.com> wrote:
 At least eight U.S. telecommunications firms were compromised in the attack, a senior White House official said
https://www.wsj.com/politics/national-security/dozens-of-countries-hit-in-ch...
Chinese government officials have denied responsibility for the
hacking
Anne Neuberger, President Biden’s deputy national security adviser
for cyber and emerging technology
“We believe that the voluntary approach has proved inadequate for the
most critical companies that underpin our critical infrastructure. So we want to complement CISA’s efforts with regulatory efforts."
participants (6)
-
J. Hellenthal -
Jason Iannone -
Joe Klein -
Ryan Wilkins -
Sean Donelan -
William Herrin