Suspected cyber-assault may lead to mobile service interruptions, according to Orange's cautionary statement.
Orange Group Undergoes Cyberattack, Similarities to Salt Typhoon Emerging
France's leading telecom operator, Orange Group, is currently dealing with a cyberattack on one of its information systems. The company has implemented solutions to gradually restore the affected services, but parts of its network have been isolated due to the attack, causing disruptions to management services and platforms.
Orange's dedicated teams are actively informing and assisting the affected customers. No further comments will be provided by Orange regarding the cyberattack due to security reasons.
While no official attribution has been made, the current consensus from multiple cybersecurity sources is that the cyberattack on Orange resembles the known activities of Salt Typhoon, a China-linked state-sponsored group known for targeting telecom providers globally.
Salt Typhoon, a part of the wider "typhoon" collective of hackers, has been striking some of the world's biggest and most popular telecom brands. The group's modus operandi includes compromising telecom infrastructure and spying on communications.
Security analysts describe Salt Typhoon’s attacks as highly sophisticated, with deep knowledge of telecom protocols, targeting core mobile networks, and satellite communication infrastructure. The FBI and CISA previously confirmed Salt Typhoon's involvement in breaches of several US telecom companies such as AT&T, Verizon, and others, as well as in numerous countries worldwide.
Business customers and some consumer services, primarily in France, may experience temporary service disruptions or complete outages for some users. No evidence of data exfiltration or tampering has been found, but Orange has lodged a formal complaint with regulators and filed notices with relevant authorities.
If tensions escalate into a full-blown war, Salt Typhoon is tasked with disrupting services, eavesdropping on vital communications, and exfiltrating sensitive information. The goal of Salt Typhoon is to remain hidden inside the network in case of escalating tensions between China and the US over Taiwan.
Being a telecommunications organization, Orange Group is constantly at the crosshairs of different hacking groups and state-sponsored cybercriminals. As the investigation continues, it remains to be seen if Salt Typhoon will be officially identified as the perpetrator of the cyberattack on Orange.
[1] FBI and CISA Confirm Salt Typhoon's Involvement in Breaches of Telecom Companies Worldwide [2] Orange's Ongoing Investigation Finds No Evidence of Data Theft Yet [3] Security Analysts Describe Salt Typhoon’s Attacks as Highly Sophisticated [4] Authorities Involved in Orange's Investigation into Cyberattack
- The ongoing cyberattack on Orange Group bears striking similarities to the known activities of Salt Typhoon, a group with a history of sophisticated attacks on telecom providers worldwide.
- As Orange Group continues its investigation into the cyberattack, the advanced nature of the attack and Salt Typhoon's previous involvement in breaches of telecom companies are causing concerns about potential data theft or network disruptions.
