Chinese Hackers Launch Secret War On South American Phone Systems

Engineers and executives are reacting to Chinese Hackers Launch Secret War On South American Phone Systems, according to The Hacker News (@TheHackersNews) (on March 6, 2026).

Source: https://x.com/TheHackersNews/status/2029835143482069272

For the average person in cities from Santiago to São Paulo, it might manifest as a sudden, unexplained drop in cellular service, or a billing error that seems impossible to resolve. But behind these minor digital irritations, a far more serious campaign is unfolding. According to a report from The Hacker News (@TheHackersNews), a sophisticated hacking group with links to China, identified as UAT-9244, has been actively infiltrating telecommunications networks across South America. This isn't random digital vandalism; it's a calculated operation targeting the backbone of modern communication.

Internal documents and technical indicators analyzed by cybersecurity firms point to a group with advanced, state-aligned capabilities, known as an Advanced Persistent Threat (APT). Their focus on telecoms is strategic. These networks are not just conduits for calls and texts; they are critical infrastructure that handle vast amounts of metadata—who calls whom, when, and from where—and provide the gateway to internet services for millions. A compromise here offers a potent intelligence-gathering platform and a potential launchpad for broader disruption. Engineers close to the investigation say the attackers have been employing a mix of custom malware and known software vulnerabilities to gain a foothold, often moving laterally for months before detection.

The immediate consequence is a severe erosion of digital privacy and security for individuals and businesses in the region. Beyond the theft of personal data, control over such networks could allow for targeted surveillance of specific individuals, corporations, or government agencies. Furthermore, in a time of geopolitical tension, these compromised systems could be leveraged to sow disinformation by intercepting or manipulating communications, or even to sever critical lines of dialogue during a crisis. The integrity of the entire digital ecosystem in these countries is now under question.

What happens next involves a delicate and technically fraught cleanup. The rollout of countermeasures and the eviction of the hackers from these networks has been anything but smooth, as telecom operators balance security with maintaining service for millions. Affected national cybersecurity agencies are likely working with international partners to trace the attacks more definitively and shore up defenses. The big, unresolved question is the ultimate intent. While intelligence gathering is the presumed goal, the persistent access creates a latent threat. The situation remains fluid, and while service may appear normal, a silent war for control of the pipes that connect a continent is fully underway.

Source: https://x.com/TheHackersNews/status/2029835143482069272