Intro: Tech giant says cyber espionage targeted governments and telecom firms worldwide.
Washington
Google has dismantled a sophisticated Chinese-linked hacking operation that infiltrated at least 53 organizations across 42 countries, according to an announcement made by the company on Wednesday. The tech major revealed that the cyber espionage campaign had been active for several years and primarily focused on government institutions and telecommunications providers.
The hacking group, tracked by Google under the codename UNC2814 and also known as Gallium, has reportedly maintained a nearly decade-long history of conducting cyber intrusions. According to findings shared by Google’s Threat Intelligence Group, the operation represented a far-reaching surveillance network designed to gather sensitive data from high-value targets across multiple regions.
John Hultquist, chief analyst with Google Threat Intelligence Group, described the campaign as extensive and strategically coordinated. This was a vast surveillance apparatus used to spy on people and organizations throughout the world, he stated. The group allegedly leveraged advanced techniques to gain unauthorized access to networks, maintain persistence, and extract confidential information without immediate detection.
Google said the affected organizations were spread across Asia, Europe, North America, and parts of Africa, highlighting the global scope of the cyber campaign. Telecommunications companies were among the primary targets, raising concerns about potential access to communication records and metadata. Government entities were also impacted, suggesting that sensitive political and strategic information may have been at risk.
The company did not disclose specific details about how it disrupted the hacking infrastructure but confirmed that protective measures had been implemented to block malicious activity and secure compromised systems. Google also indicated it is working closely with impacted organizations and international cybersecurity partners to mitigate further risks.
Cybersecurity experts note that state-linked cyber espionage campaigns have grown increasingly sophisticated in recent years, often targeting critical infrastructure and public institutions. The disruption of this network marks a significant step in countering global cyber threats, but analysts warn that similar operations are likely ongoing.
Google emphasized the importance of continued vigilance, collaboration, and investment in cybersecurity defenses to combat evolving digital threats worldwide.
