Story perspectives

Chinese Hackers Exploit Cisco Flaw to Infiltrate U.S. Networks

2/22/2025

49 7

Summary

Story summary

Chinese hackers known as Salt Typhoon exploited Cisco vulnerability CVE-2018-0171 to infiltrate U.S. telecom networks for over three years.
They utilized stolen credentials and a custom tool, JumbledPath, to capture network traffic and alter device settings.
Cisco Talos noted that Salt Typhoon used living-off-the-land techniques to avoid detection.
This campaign underscores the dangers of outdated systems and emphasizes the need for robust identity security measures.

1 of 1

Story summary

Chinese hackers known as Salt Typhoon exploited Cisco vulnerability CVE-2018-0171 to infiltrate U.S. telecom networks for over three years.
They utilized stolen credentials and a custom tool, JumbledPath, to capture network traffic and alter device settings.
Cisco Talos noted that Salt Typhoon used living-off-the-land techniques to avoid detection.
This campaign underscores the dangers of outdated systems and emphasizes the need for robust identity security measures.