The reach of the China-linked Salt Typhoon gang extends beyond American telecommunications giants, and its arsenal includes several backdoors, including a brand-new malware dubbed GhostSpider, according to Trend Micro researchers.

While GhostSpider took all the limelight, Salt Typhoon was also spotted using other, never-seen-before variants, including a Linux backdoor called Masol RAT, a rootkit called Demodex, and a backdoor named SnappyBee.

The Chinese state-sponsored hacking group Salt Typhoon has been observed utilizing a new "GhostSpider" backdoor in attacks against telecommunication service providers.

The Chinese government espionage campaign that has deeply penetrated more than a dozen U.S. telecommunications companies is the “worst telecom hack in our nation’s history — by far,” a senior U.S. senator told The Washington Post in an interview this week.

Salt Typhoon's breach compromises U.S. telecom giants, including T-Mobile, AT&T, and Verizon. The hack exposes vulnerabilities in U.S. wiretapping systems, threatening national security and potentially the data of millions of Americans. T-Mobile claims limited damage, but the full scope of the breach is still unclear.

The statement followed reports about "Salt Typhoon," a Chinese-linked cyberespionage operation targeting U.S. telecommunications firms. T-Mobile Chief Security Officer Jeff Simon said in a blog on the company's website Wednesday that the company detected ...