nanog mailing list archives

Re: WSJ: Dozens of Countries Hit in Chinese Telecom Hacking Campaign, Top U.S. Official Says


From: Joe Klein <jsklein () gmail com>
Date: Thu, 5 Dec 2024 16:20:31 -0500

I was wrong. Here is a list:
https://firewalltimes.com/att-data-breaches/
https://firewalltimes.com/verizon-data-breaches/
https://firewalltimes.com/google-data-breach-timeline/

Over the past 25 years, security researchers worldwide have consistently
identified new SS7 vulnerabilities (thank you AT&T) each year. Furthermore,
at BlackHat around 2006, a researcher revealed several major
vulnerabilities in law enforcement tools, techniques, and technologies.





Joe Klein

"inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1)
"*I skate to where the puck is going to be, not to where it has been."
-- *Wayne
Gretzky
"I never lose. I either win or learn" - Nelson Mandela


On Thu, Dec 5, 2024 at 4:06 PM Joe Klein <jsklein () gmail com> wrote:

Here is the public Breach Report for T-Mobile.
https://firewalltimes.com/t-mobile-data-breaches/
Unable to find AT&T, Verizon or several other companies on the list.

Joe Klein

"inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1)
"*I skate to where the puck is going to be, not to where it has been."
-- *Wayne Gretzky
"I never lose. I either win or learn" - Nelson Mandela


On Thu, Dec 5, 2024 at 3:43 PM Ryan Wilkins <ryan () deadfrog net> wrote:

There’s been a question about T-Mobile being part of this or not.  I have
no specific knowledge, but just count the number of times they’ve been
hacked in the past (that we know of) and draw your conclusion that they’re
part of this.

Ryan Wilkins

On Dec 5, 2024, at 3:38 PM, Joe Klein <jsklein () gmail com> wrote:


I suspect that a gag order has been issued for the other companies, and a
cybersecurity incident response team has already been hired and is in place.

Joe Klein

"inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene
1)
"*I skate to where the puck is going to be, not to where it has been."
-- *Wayne Gretzky
"I never lose. I either win or learn" - Nelson Mandela


On Thu, Dec 5, 2024 at 9:58 AM Jason Iannone <jason.iannone () gmail com>
wrote:

CNN mentioned Lumen. T-Mo?

On Wed, Dec 4, 2024 at 5:22 PM J. Hellenthal via NANOG <nanog () nanog org>
wrote:

Failing to find a list of providers that were hit. Anyone know more ? I
don't see them mentioned.
Verizon & AT&T I know of.

--
 J. Hellenthal

The fact that there's a highway to Hell but only a stairway to Heaven
says a lot about anticipated traffic volume.

On Dec 4, 2024, at 14:59, Sean Donelan <sean () donelan com> wrote:


At least eight U.S. telecommunications firms were compromised in the
attack, a senior White House official said


https://www.wsj.com/politics/national-security/dozens-of-countries-hit-in-chinese-telecom-hacking-campaign-top-u-s-official-says-2a3a5cca

Chinese government officials have denied responsibility for the
hacking


Anne Neuberger, President Biden’s deputy national security adviser
for cyber and emerging technology

“We believe that the voluntary approach has proved inadequate for the
most critical companies that underpin our critical infrastructure. So we
want to complement CISA’s efforts with regulatory efforts."



Current thread: