Cyber Range | Communications: Salt Typhoon

Join us for a member only cyber-range exercise.

Improve your defense and response skills!

Orchid Communications provides broadband services and cellular infrastructure for retail and commercial customers. Threat advisories need to be investigated.

Orchid Communications is a subsidiary of Orchid Corporation and operates telecommunications infrastructure in the US and Europe. It provides broadband services and cellular infrastructure for retail and commercial customers.

Threat advisories from the US CISA and the UK NCSC are warning telecommunications companies that there has been activity associated with the threat actor Salt Typhoon in a recent uptick of attacks targeting the sector. A new variant of the SparrowDoor malware has been identified and has been used to gain an initial foothold in impacted networks.

Salt Typhoon is believed to be directed by the intelligence collection requirements of China’s Ministry of State Security (MSS) and its associated foreign intelligence activities. The group likely targets critical national infrastructure (CNI) for intelligence collection and to pre-position and maintain access in the event of escalating tensions between the US and China.

As a member of the security team, you’ll need to use Orchid's security stack and the information provided in the Threat reporting section below to detect Salt Typhoon in a branch of the Orchid Communications network.

Event details:

• FS-ISAC members only

• $495 fee per person

• Activity = 6 CPEs

Please visit the FAQ Page for additional information or see our other upcoming exercises.