While GhostSpider took all the limelight, Salt Typhoon was also spotted using other, never-seen-before variants, including a Linux backdoor called Masol RAT, a rootkit called Demodex, and a backdoor named SnappyBee.

The Chinese state-sponsored hacking group Salt Typhoon has been observed utilizing a new "GhostSpider" backdoor in attacks against telecommunication service providers.

Plus, a brand-new backdoor, GhostSpider, is linked to the cyber spy crew's operations The reach of the China-linked Salt Typhoon gang extends beyond telecommunications giants in the United States, and its arsenal includes several backdoors – including a brand-new malware dubbed GhostSpider – according to Trend Micro researchers.

Salt Typhoon's breach compromises U.S. telecom giants, including T-Mobile, AT&T, and Verizon. The hack exposes vulnerabilities in U.S. wiretapping systems, threatening national security and potentially the data of millions of Americans. T-Mobile claims limited damage, but the full scope of the breach is still unclear.

The CSO of T-Mobile has clarified that no customer information was stolen by Chinese hacking group Salt Typhoon

A recent confirmed T-Mobile hack has been attributed to Salt Typhoon, the Chinese cyber espionage team that also breached Verizon and AT&T earlier in the year. That means the hackers were able to penetrate all three of the country's major mobile carriers in 2024.

T-Mobile says the Chinese "Salt Typhoon" hackers who recently compromised its systems as part of a series of telecom breaches first hacked into some of its routers to explore ways to navigate laterally through the network.

U.S. telecom firm T-Mobile said on Wednesday it had detected attempts in recent weeks by "bad actors" to infiltrate its systems but they did not access sensitive customer data.

The mobile carrier provided its first detailed rundown of how it stopped hackers from infiltrating its networks.