Show Notes
After their hidden breach of the National Guard, the cybercrime group was discovered to have targeted a major telecommunications firm named Visat. After their hidden breach of the National Guard, the cybercrime group was found to have attacked a large telecommunications company called Visat. The interesting part—these attacks are not disruptive; Salt Typhoon merely gathers information, hoards credentials and finds vulnerabilities. Because of their stealthy nature, these attacks are only detected after the attackers have already left. To what aim remains to be seen.
Matt and David dive into these attacks, and talk about what else is happening in the world of cybercrime.
More from State of Cybercrime
ShinyHunters claims it stole 2-3 TB of FBI data and shared a sample with researchers containing information on employees, applicants, and even family members.
If your company runs PTC Windchill, Cl0p may already have your blueprints.
A complete attack chain run by an AI agent – with zero human hands on the keyboard.
The supply chain remains the weakest link. A new automated malware campaign dubbed “Megalodon” poisoned more than 5,500 GitHub repos in just six hours, quietly harvesting cloud credentials, tokens, and sensitive code from environments that implicitly trust what they pull.