Trump Family Members and Biden Aides Among China Hack Targets
Phones used by Jared Kushner and Eric Trump were among those that hackers sought access to as part of a counterintelligence effort carried out by a hacking group associated with China.
by https://www.nytimes.com/by/devlin-barrett, https://www.nytimes.com/by/ben-protess, https://www.nytimes.com/by/maggie-haberman · NY TimesMembers of former President Donald J. Trump’s family, as well as Biden administration and State Department officials, were among those targeted by the China-linked hackers who were able to break into telecommunications company systems, according to people familiar with the matter.
The sophisticated hacking operation has alarmed national security officials and appears to have targeted a substantial but focused list of people whose communications would be of interest to the Chinese government. The list of known targets is currently fewer than 100 individuals, these people said, speaking on condition of anonymity to describe a sensitive ongoing investigation.
So far, the list of targeted phones includes devices used by high-profile people, including Mr. Trump, his son Eric Trump and his son-in-law Jared Kushner. The list also includes members of Vice President Kamala Harris’s campaign staff, as well as diplomatic, government and policy experts who are largely unknown to the general public but would hold significant interest to Chinese officials eager to learn more about internal U.S. policy-making, these people said. It is unclear what, if any, data was taken from those individuals.
In a statement, Eric Trump sought to blame the Biden administration for the hacking of the telecommunications networks, saying, “Does this surprise anyone? Under Kamala and Biden, China has walked all over our country.”
An aide to Mr. Kushner did not respond to an email seeking comment. Steven Cheung, a spokesman for the Trump campaign, said Mr. Trump “will actually stand up against our enemies and defend the United States from any and all aggression.”
The Trump campaign team was notified last week that phones used by Mr. Trump and his running mate, Senator JD Vance of Ohio, were among those targeted through the infiltration of Verizon phone systems. Others targeted by the hackers have been receiving similar notifications from U.S. authorities.
Democrats, including an aide to Senator Chuck Schumer of New York, the majority leader, were also targeted, the people said.
The investigation is continuing, but F.B.I. and national security officials are deeply concerned about the potential extent of compromised data and the wide range of possible victims. U.S. authorities have publicly attributed the hacking to “actors affiliated with” the Chinese government.
Western cybersecurity circles have attributed the hack to a group they call Salt Typhoon, which has a history of carrying out sophisticated cyberoperations to benefit Chinese intelligence work. People familiar with the high-profile national security case cautioned that the investigation was ongoing and that officials’ understanding of the breach could change.
F.B.I. investigators think the hackers may have been able to access unencrypted SMS text messages on the targeted devices, as well as call logs, according to people familiar with the investigation. They said there was also evidence indicating that audio communications were captured, though it was not immediately clear whether that meant voice mail or phone call conversations.
U.S. security officials discovered earlier this year that Salt Typhoon hackers had broken into American telecommunications systems, raising major alarms within the government that national security secrets could be vulnerable through previously unrecognized vulnerabilities in cellphone networks.
At the outset, investigators were particularly concerned that the hackers might be targeting the names or data collected under Foreign Intelligence Surveillance Act court orders — the government’s most secretive type of surveillance, meant to root out spies and terrorists.
It was only recently that investigators discovered another apparent line of attack by the Salt Typhoon hackers — specific phone numbers used by senior government officials, or their close advisers and aides. Security officials are still trying to determine precisely what data or communications were taken.