THE CYBEROBSERVER
Cyber ThreatGeopolitics

Salt Typhoon Infrastructure Persistence: A Technical Assessment

Chinese state-sponsored actors have maintained access to allied telecom networks for over 18 months using living-off-the-land techniques that evade conventional detection.

6 Jun 20261 min read

Executive Summary

The Salt Typhoon campaign represents the most consequential signals intelligence operation against Western telecommunications infrastructure in recent history. At least nine US telecommunications companies were compromised between 2024 and 2025, with evidence of persistent access to lawful intercept systems.

Technical Indicators

Full analysis continues below

Register to read the complete assessment

The Cyber Observer is independent — no advertising, no vendor sponsorship, no editorial constraints. Registration gives you full access to all articles and briefings for 12 months. No payment required.

Register — 12 months free

Email only. No card. Unsubscribe anytime.