FBI Announces Joint Cybersecurity Advisory Related to Salt Typhoon

John

https://youtu.be/DrNMKy4-0Xo?si=JF_nygqyaUQtbcHy

[Released August 27, 2025]The advisory, paired with the enhanced visibility and hardening guidance for communications infrastructure, which we released in December 2024, gives providers practical steps to improve visibility and detect malicious activity early.

---

Video Transcript

Brett Leatherman, assistant director, Cyber Division:

I’m Brett Leatherman, head of the FBI’s Cyber Division. Last fall, the FBI and CISA attributed compromises at U.S. telecommunications providers to PRC-affiliated actors known as Salt Typhoon. Active since at least 2019, these actors conducted a significant cyber-espionage campaign, breaching global telecommunications privacy and security norms.

Today, we are releasing a Joint Cybersecurity Advisory to help defenders prevent, detect, and respond to this threat. Paired with guidance from late 2024, it offers practical steps to improve visibility and detect malicious activity early.

Last fall, our Washington Field Office uncovered forensic evidence which enabled us to notify victims about compromises. The timely, critical information shared by victims, in collaboration with cyber threat intelligence and incident response companies, played a pivotal role in countering the activity. Their willingness to share information in real time made this progress possible, protecting not only their networks but the broader telecommunications sector and global infrastructure.

Beijing’s indiscriminate targeting of private communications demands our stronger collaboration with our partners to identify and counter this activity at the earliest stages. If you believe you are a victim of Salt Typhoon — or any other malicious cyber activity — I encourage you to contact your local FBI field office.

I’m proud of the FBI’s role in defending our nation’s critical infrastructure. Defending the homeland means protecting the American people and our institutions from foreign intelligence collection and cyber operations. Today’s release is a milestone in the Salt Typhoon story, but the story isn’t finished — we will keep pressing forward until those responsible are brought to justice.

John

美国联邦调查局发布与盐台风（Salt Typhoon）相关的联合网络安全警告
该咨询报告与我们于 2024 年 12 月发布的增强通信基础设施可视性和强化指南相结合，为提供商提供了提高可视性和及早发现恶意活动的实用步骤。

---

视频记录

网络部门助理总监 Brett Leatherman 表示：

我是布雷特·莱瑟曼，美国联邦调查局网络部门负责人。去年秋天，美国联邦调查局和美国网络安全情报局（CISA）将美国电信供应商的入侵事件归咎于与中国有关联的“盐台风”（Salt Typhoon）组织。这些组织至少自2019年以来一直活跃，开展了大规模的网络间谍活动，违反了全球电信隐私和安全规范。

今天，我们发布了一份联合网络安全警告，旨在帮助防御者预防、检测和应对这一威胁。该警告结合了 2024 年底发布的指南，提供了切实可行的步骤，以提高可见性并及早发现恶意活动。

去年秋天，我们的华盛顿实地办公室发现了法医证据，使我们能够将入侵事件通知受害者。受害者与网络威胁情报和事件响应公司合作，及时分享了关键信息，在打击此类活动方面发挥了关键作用。他们愿意实时共享信息，这使得这一进展成为可能，不仅保护了他们的网络，也保护了更广泛的电信行业和全球基础设施。

北京不加区分地攻击私人通信，这要求我们与合作伙伴加强合作，以便尽早识别并打击此类活动。如果您认为自己是“盐台风”或任何其他恶意网络活动的受害者，我建议您联系您当地的联邦调查局（FBI）外勤办公室。

我为联邦调查局在保卫我们国家关键基础设施方面发挥的作用感到自豪。保卫国土意味着保护美国人民和我们的机构免受外国情报收集和网络行动的侵害。今天的发布是“盐台风”事件的一个里程碑，但这个故事远未结束——我们将继续努力，直到肇事者被绳之以法。