How China Just Hacked The U.S. Treasury...

The US Treasury and major telecom companies have been hacked by a China-linked cyber actor, likely "Salt Typhoon," exposing sensitive metadata and raising serious concerns about national security and privacy. 2:04

Key Takeaways:
• The US Treasury was hacked via a compromised cloud security tool, allowing access to unclassified documents 1:01–1:29.
• Salt Typhoon, a China-backed advanced threat actor, is blamed for hacking at least nine major telecom providers including AT&T, Verizon, and T-Mobile 4:20–4:27.
• The attacks primarily target metadata—such as call logs and message timestamps—rather than content, enabling surveillance of individuals, especially politicians and government workers 8:43–9:50.
• Attackers use tools like Ghost Spider, Cobalt Strike, and PowerShell-based "living off the land" techniques to move laterally and exfiltrate data 16:04–18:39.
• CISA recommends using end-to-end encrypted messaging (e.g., Signal) and security keys (like YubiKeys) to protect personal data 11:00–12:53.

The situation underscores growing cyber threats to critical infrastructure and highlights urgent personal privacy measures. 22:50–23:06

Sources:

• 2:04 Treasury hack and compromised cloud service.
• 1:01–1:29 Unauthorized access to Treasury user workstations.
• 4:20–4:27 Nine telecom companies targeted by Salt Typhoon.
• 8:43–9:50 Metadata thef