Chinese APT Group SilentAir Exploits Telco Infrastructure for Covert Espionage in Six Countries, Including Taiwan
A newly identified Chinese advanced persistent threat (APT) group, SilentAir, has been actively exploiting telecommunications infrastructure since early 2025. According to telco security firm ENEA, SilentAir is planting backdoors within telco networks to execute malicious SS7 and Diameter commands. These commands enable the group to collect device data, track subscriber locations, and intercept calls and SMS traffic. While SilentAir's SS7/Diameter attacks have been detected in six countries, the majority of its targets have been Taiwanese telcos and their subscribers. In some instances, the group has also targeted high-value individuals, such as political figures and government officials. SilentAir is noted for its sophisticated and covert espionage activities, operating with a stable presence in hacked networks through its malware. The group's operations have shown some overlap with another Chinese APT, Liminal Panda, in terms of network presence, though only SilentAir has been observed using SS7 and Diam...
