December 3rd, 2024

US officials urge Americans to use encrypted apps amid unprecedented cyberattack

U.S. officials advise using encrypted messaging apps due to the Salt Typhoon cyberattack linked to China, which compromised telecommunications data. The attack is seen as cyberespionage, not election interference.

Read original articleLink Icon
US officials urge Americans to use encrypted apps amid unprecedented cyberattack

U.S. officials are advising Americans to utilize encrypted messaging apps in response to a significant cyberattack targeting telecommunications companies like AT&T and Verizon. This hacking campaign, referred to as Salt Typhoon by Microsoft, is one of the largest intelligence breaches in U.S. history and remains unresolved. Officials from the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) highlighted the importance of encryption to protect communications from foreign hackers, particularly from China, which has been implicated in the attacks. They noted that the hackers accessed various types of information, including call metadata and live phone calls of specific targets, but did not provide a timeline for when the telecommunications systems would be secure. Privacy advocates have long supported the use of end-to-end encrypted apps, such as Signal and WhatsApp, to safeguard communications. Despite the FBI's historical opposition to full encryption that prevents law enforcement access, they now recognize the necessity of encryption in protecting sensitive information. The officials clarified that the cyberattack was not aimed at influencing election outcomes but was a traditional espionage effort to gather intelligence on U.S. politics and government.

- U.S. officials recommend using encrypted messaging apps to protect communications amid a major cyberattack.

- The hacking campaign, named Salt Typhoon, is linked to China and has compromised significant telecommunications data.

- The FBI and CISA have not provided a timeline for when telecommunications systems will be secure.

- Privacy advocates emphasize the need for end-to-end encryption to protect sensitive information from foreign adversaries.

- The cyberattack is viewed as a cyberespionage operation rather than an attempt to sway election results.

Link Icon 5 comments
By @JumpCrisscross - 2 months
We may have the momentum to E2E encrypt our phone network.

Mistrust of the “deep state” in the White House. Penetration demonstration by an adversary. Common use of encrypted apps making the switch less extreme.

By @AnimalMuppet - 2 months
After the war against encryption by investigative agencies (because it makes their jobs harder), this is... different. Maybe we actually do need protection against people spying on us, when the people spying on us aren't them?
By @ano-ther - 2 months
> Our suggestion, what we have told folks internally, is not new here: encryption is your friend, whether it’s on text messaging or if you have the capacity to use encrypted voice communication.

Solid advice. But how do I get encrypted voice communication? Are Signal‘s or WhatsApp‘s calls encrypted?

Also, they sound so much worse than an old-fashioned call.

By @fragmede - 2 months
Not that you shouldn't do better with opsec in your daily life, but with the amount of data China has on Americans in the form of Temu and AliExpress orders, nevermind TikTok viewing habits, what's the threat model? If I make Winnie the Pooh jokes about dear leader on the phone, am I getting abducted from the west and sent to the steppes of Tibet? Why would they bother? Again, yes, do have better opsec and use something encrypted, I'm just not sure who's a bigger threat, five eyes governments who have boots on the ground, or the CCP, half the world away.
By @pcunite - 2 months
Why is this not front page?