Security Market: T-Mobile Technician Cuts Cable to Thwart Salt Typhoon Hack

A T-Mobile technician literally cut a cable to stop the Chinese Salt Typhoon cyberespionage campaign, as reported by Bloomberg. In autumn 2024, Salt Typhoon infiltrated nine major US telecom companies, including Verizon, AT&T, and T-Mobile, compromising routers and accessing metadata of millions of customers. T-Mobile's security team discovered an unusual router in its California data center that was communicating despite being offline. Tracing the signal, they found a manipulated router at another telecom company in Chicago, posing as a T-Mobile device. A technician drove to the site and cut the router's cable with scissors, successfully halting the attack. The router was later re-activated in an isolated test environment, but the attackers had already disappeared. T-Mobile's CIO Jeff Simon stated the hackers never accessed customer data, and the severed cable is now displayed in a frame as a memento of the incident.