A sophisticated group of Chinese government-linked hackers has infiltrated several major U.S. telecommunications companies in recent months, potentially compromising sensitive information related to national security, according to multiple sources briefed on the matter. The hack has raised significant concerns among U.S. officials, who are investigating the extent of the breach.

Investigators believe the hackers may have accessed wiretap warrant requests, which are typically used by law enforcement in criminal and national security investigations. The targeted companies include AT&T, Verizon, and Lumen, sources revealed. However, the full scope of the data the hackers may have obtained is still under investigation.

The hack comes at a time of heightened tensions between Washington and Beijing over cyber-espionage and other national security issues. U.S. telecom firms play a critical role in internet and phone communications, making them prime targets for hackers seeking valuable data. These firms maintain large volumes of caller and user data, which is often subject to law enforcement access through warrants.

Some of the investigations affected by this breach could be of particular interest to China, as the U.S. has pursued legal actions against Chinese government agents for allegedly targeting Chinese nationals and political dissidents in the U.S., as well as American companies.

While AT&T and Lumen declined to comment, Verizon did not respond to multiple inquiries. The Department of Justice and the FBI also declined to provide statements on the matter. The Chinese Embassy in Washington, DC, denied the accusations, dismissing the hacking reports as a “distortion of the fact” and accusing the U.S. of politicizing cybersecurity issues to smear China.

The Wall Street Journal first reported the hacking activity, which has since been discussed in classified briefings with the House and Senate intelligence committees. Microsoft and Mandiant, a cybersecurity firm owned by Google, are assisting with the investigation.

The hackers, identified by the cybersecurity industry as Salt Typhoon, are known for their persistence and skill. Microsoft acknowledged tracking the group and noted that it provides customers with information about potential state-sponsored cyber activity.

Salt Typhoon is just one of many Chinese hacking teams, U.S. officials said, highlighting the vast cyber capabilities at China’s disposal. FBI Director Christopher Wray has previously stated that Chinese government-backed hackers outnumber FBI cyber personnel 50 to 1. Another hacking group, also linked to Beijing, has allegedly infiltrated U.S. transportation and communication networks, potentially to disrupt any U.S. response to a Chinese invasion of Taiwan.

As cybersecurity tensions continue, hacking incidents remain a frequent point of contention in U.S.-China relations.

Former President Donald Trump’s presidential campaign claimed on Saturday that it had been the target of a hacking attack, suggesting that Iranian actors were involved in stealing and distributing sensitive documents. This allegation comes just a day after Microsoft released a report detailing foreign attempts to interfere in the upcoming 2024 U.S. presidential election.

While the Trump campaign did not provide specific evidence linking the hack to Iran, their claims align with Microsoft’s findings. The tech giant’s report highlighted a recent incident in which Iranian military intelligence allegedly sent a spear-phishing email to a high-ranking official of a presidential campaign using a compromised email account belonging to a former senior advisor.

Trump campaign spokesperson Steven Cheung attributed the hack to “foreign sources hostile to the United States” but did not elaborate further on the alleged involvement of Iranian actors. The National Security Council responded to the situation, stating that it takes any reports of foreign interference “extremely seriously” and condemns any attempts to undermine confidence in U.S. democratic institutions.

In response to the allegations, Iran’s mission to the United Nations denied any involvement in the hack, dismissing the claims. “We do not accord any credence to such reports,” a spokesperson for the mission said. “The Iranian government neither possesses nor harbors any intent or motive to interfere in the United States presidential election.”

Despite the denial, Iran has previously been suspected of running hacking campaigns against its adversaries in the Middle East and beyond, raising concerns about potential foreign interference in the U.S. election.

As the 2024 presidential race heats up, reports of foreign influence and cybersecurity threats continue to be a focal point, with both the government and private sector remaining vigilant against potential threats to the integrity of the electoral process.

Microsoft has revealed that Iranian operatives are intensifying their attempts to influence the upcoming U.S. presidential election by creating fake news outlets targeting both liberal and conservative voters. Additionally, they have made attempts to hack a U.S. presidential campaign, according to research published by Microsoft late Thursday.

The report highlights one of the fake news sites allegedly created by Iranian operatives, which disparaged former President Donald Trump, referring to him as an “opioid-pilled elephant in the MAGA china shop” and a “raving mad litigiosaur.” Another fake outlet, posing as a “trusted source for conservative news” in Savannah, Georgia, focuses on LGBTQ issues and gender reassignment. While these sites have not yet gained significant traction on social media, Microsoft warns that they could gain momentum as the election approaches.

The findings from Microsoft provide some of the most explicit public examples of what U.S. intelligence officials recently described as an ongoing covert social media campaign by Iran. This campaign aims to undermine Trump’s candidacy and increase social discord in the U.S. ahead of the November election.

Clint Watts, general manager of the Microsoft Threat Analysis Center, stated in a blog post that the Iranian operatives have “laid the groundwork for influence campaigns on trending election-related topics and begun to activate these campaigns in an apparent effort to stir up controversy or sway voters – especially in swing states.”

The report also detailed an attempt by a hacking group linked to Iran’s Islamic Revolutionary Guard Corps to breach the email account of a high-ranking official in a U.S. presidential campaign. While Microsoft declined to specify which campaign was targeted, it confirmed that it had notified the campaign of the hacking attempt.

In addition to Iranian efforts, Microsoft noted ongoing attempts by Russian operatives to “drive headlines with fake scandals” aimed at disrupting the U.S. election. These fabricated stories include claims that the CIA instructed a Ukrainian troll farm to interfere with the election and that the FBI wiretapped Trump’s residence. Chinese online personas were also reported to have used numerous online accounts to amplify outrage around pro-Palestinian protests at U.S. universities earlier this year.

As the 2024 election approaches, U.S. officials are bracing for an array of foreign intelligence operations aimed at influencing or undermining the electoral process. While Russia remains the predominant threat, Iran and China also pose significant risks, according to assessments from the Office of the Director of National Intelligence (ODNI).

Iran has denied the allegations of election interference and assassination plots against Trump. The U.S. Department of Justice recently announced charges against a Pakistani man with alleged ties to the Iranian government for attempting to carry out political assassinations, further heightening tensions surrounding Iran’s activities.