China's Hacking Your Bus and Your PM's Texts: The Salt Typhoon EV Nightmare

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Hey listeners, Ting here with your Digital Dragon Watch: Weekly China Cyber Alert, diving straight into the hottest threats from the past seven days ending January 28, 2026. Buckle up—China's cyber game is fiercer than a Shenzhen street food standoff, but I've got the deets to keep you armored. First off, the big buzz: UK officials are pointing fingers at China's Salt Typhoon hackers for infiltrating Downing Street phones from 2021 to 2024, snagging texts, calls, and metadata from aides to Boris Johnson, Liz Truss, and Rishi Sunak. The Telegraph reports this espionage op, linked to US intel, hit deep into government hearts, possibly still active under Keir Starmer. That's telecom infrastructure under siege, folks—imagine your PM's group chat leaked to Beijing. No wonder MI5's yelling vigilance from the rooftops. Over in transport, Yutong Bus electric vehicles—those Chinese-made EVs rolling through Europe and Australia—are a hacker's dream. DuoCircle highlights how researchers found weak Controller Area Network encryption, letting remote control of brakes or even a "kill switch." Norway tested 'em last year, Denmark and the UK are probing now, and Canberra's public transport authority frets over national security risks. Targeted sector? Critical infrastructure on wheels—imagine gridlock from afar. Asia's espionage heat is rising too. Mustang Panda, that sly China-linked APT, dropped an updated COOLCLIENT backdoor in 2025 ops against Myanmar, Mongolia, Malaysia, Russia govs and telecoms, per The Hacker News. It steals keystrokes, files, clipboard gold via Sangfor software abuse, plus TONESHELL persistence and QReverse RAT for shells and screenshots. New vector: DLL side-loading meets rootkits, perfect for long-haul data heists. US responses? Matthew Ferren from Council on Foreign Relations warns in HS Today that Trump's offense-first cyber push won't dent China's massive ecosystem—they just respawn hackers like Pokémon. He slams CISA cuts under new staffing woes, urging defense rebuilds: harden infra, enforce standards. Meanwhile, Senator Chuck Grassley's Senate hearing nods Section 702 FISA as key against China hacks. Pentagon eyes upside from Xi Jinping purging PLA brass like Zhang Youxia and Liu Zhenli for corruption, per Politico—buys time for Indo-Pacific alliances, drone swarms. Expert recs? Ditch weak CAN tech, patch EVs pronto. Deploy 1Password's anti-phish pop-ups to block autofill mismatches. AI? Hong Kong's record 18,577 attacks last year, mostly phishing, scream top-down AI governance, says their Computer Emergency Response Team. Globally, Check Point clocks 1,968 weekly attacks per org—up 70%—so automate defenses, not just chase tails. Stay sharp, listeners: multi-factor everything, audit third-parties, and drill for Salt Typhoon-style telecom takedowns. China's not slowing—revise your playbook now. Thanks for tuning in—subscribe for more dragon-slaying intel! This content was created in partnership and with the help of Artificial Intelligence AI.