Ting Spills Tea: China's Hackers Crashed Biden's Phone and Nobody Noticed for Months

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Hey listeners, Ting here with your Digital Dragon Watch: Weekly China Cyber Alert, diving straight into the hottest threats from the past seven days ending January 12, 2026. Buckle up—China-linked hackers have been on a tear, flexing zero-days and telecom takedowns like it's their day job. Kicking off with a bang: on January 9, Cyber News Centre reported sophisticated Chinese-speaking threat actors exploiting VMware zero-days to bust out of virtual machines. These sneaky ops used a hacked SonicWall VPN as their launchpad, deploying ESXi flaws that'd been lurking for over a year before disclosure—classic living-off-the-land tactics to pivot into deeper network access. Targeted sectors? Think critical infrastructure, with Taiwan's energy grid getting hammered tenfold by China-linked attacks in 2025 alone, per Security Affairs, spiking across nine sectors like power and transport. Then there's the monster telecom breach blowing up U.S. networks. LG Networks detailed how Chinese hackers infiltrated Verizon, AT&T, and Lumen Technologies routers, slurping call logs, texts, and GPS from over a million users—undetected for months. They zeroed in on Biden admin bigwigs, including a Cabinet secretary and White House homeland security adviser. Senator Mark Warner called it "the worst telecom hack in U.S. history." FBI and DHS are knee-deep in probes, rolling out patches and intel-sharing to lock it down. New attack vectors? UAT-7290, that persistent China crew, hit South Asia and Southeastern Europe with espionage droppers like RushDrop and SilentRaid since 2022, per Security Affairs. And don't sleep on pre-positioning: World Economic Forum's 2026 Outlook flagged Chinese intrusions into U.S. critical infrastructure, mirroring Stuxnet-style wartime prep—Dragos even sniffed out state actors' doomsday modules in 2021. U.S. gov response? Trump's team is briefing cyber options—not just for Iran, but amid China-Russia pokes at telecoms and grids, as Politico notes. G7 Cyber Expert Group, via U.S. Treasury, dropped a post-quantum crypto roadmap today, with Cory Wilson warning quantum rigs could shred financial encryption. Expert recs for you defenders: Patch VMware and SonicWall yesterday—CrowdStrike's Drew Bagley says segment VMs ruthlessly. Enforce MFA everywhere, per NordVPN breach scares, and hunt for anomalous router traffic. For telecoms, air-gap high-value targets and drill incident response. Taiwan's lesson? AI deepfakes from legit China firms are phishing gold—train your teams with Cybernews intel. Stay frosty, folks—this dragon's got claws, but smart configs keep it caged. Thanks for tuning in to Digital Dragon Watch—subscribe now for weekly drops! This has been a Quiet Please production, for more check out quietplease.ai. For more http://www.quietplease.ai Get the best deals https://amzn.to/3ODvOta This content was created in partnership and with the help of Artificial Intelligence AI.