Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

U.S., Canadian and Singaporean authorities have reported cyber-espionage operations against telecommunications providers. Their public accounts describe access to telecom systems and, in the U.S. case, theft of call-record data and compromise of some private communications. They do not establish that the intrusions specifically targeted 5G networks or exploited 5G technology.

What did the reported intrusions access?

The reports describe different operations in different countries, with different actors and documented effects. They should not be treated as one campaign or as evidence that every provider experienced the same activity.

Case What authorities reported Important scope limit
United States On 13 November 2024, the FBI and CISA said PRC-affiliated actors compromised multiple telecommunications companies. The agencies reported theft of customer call-record data, compromise of private communications belonging to a limited number of people—primarily people involved in government or political activity—and copying of some information subject to U.S. law-enforcement requests pursuant to court orders. The agencies distinguished call-record data from private communications. Their statement does not say that all customers’ calls or messages were accessed.
Canada The Canadian Centre for Cyber Security reported that three network devices registered to a Canadian telecommunications company were compromised in mid-February 2025. It assessed that likely Salt Typhoon actors exploited CVE-2023-20198 to retrieve running configurations. At least one device’s configuration was modified to create a GRE tunnel for collecting network traffic. The report does not establish that all three devices were configured to collect traffic. The attribution is expressed as likely, not certain.
Singapore In a report published 9 February 2026, Singapore’s Cyber Security Agency (CSA) said UNC3886 targeted all four major operators: M1, SIMBA Telecom, Singtel and StarHub. CSA described a zero-day firewall bypass and rootkit use. CSA said it had no evidence to date of customer-record access or exfiltration, or of telecom service disruption. It did report unauthorized access to some systems, including limited access to critical systems in one instance.

The Singapore operation is a separate case from the Salt Typhoon reporting about U.S. and Canadian telecoms; the names refer to different actor designations in the respective agency accounts.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why is telecom access valuable for espionage?

Telecom providers carry communications and hold data about communication, location and devices. The Canadian Centre for Cyber Security says state actors have persistently targeted providers for bulk data and high-value intelligence collection. Access to a provider’s network can therefore create intelligence opportunities that are not limited to reading message content.

#1 Best Overall
Sale
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
  • DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
  • AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
  • CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
  • EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
  • OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.

Perimeter equipment—including routers, firewalls and VPN solutions—can be a useful foothold. The Canadian Centre notes that a compromise may allow an actor to observe or modify traffic, exfiltrate information, or move further into a network. These are sector-level risks, not proof that every capability was used in each reported incident. In Canada, the specific confirmed technical detail was retrieval of device configurations and the creation of a GRE tunnel on at least one device.

Were these attacks specifically about 5G?

The agency reporting described here concerns telecommunications infrastructure generally. It does not establish that attackers breached 5G radio access networks, targeted 5G core functions, or exploited a vulnerability specific to 5G. A telecom provider may operate multiple generations of technology and other network systems; targeting a provider alone does not show which generation or function was involved.

Rank #2
TP-Link AXE5400 Tri-Band WiFi 6E Router, 2025 PCMag Editors' Choice
  • Tri-Band WiFi 6E Router - Up to 5400 Mbps WiFi for faster browsing, streaming, gaming and downloading, all at the same time(6 GHz: 2402 Mbps;5 GHz: 2402 Mbps;2.4 GHz: 574 Mbps)
  • WiFi 6E Unleashed – The 6 GHz band brings more bandwidth, faster speeds, and near-zero latency; Enables more responsive gaming and video chatting
  • Connect More Devices—True Tri-Band and OFDMA technology increase capacity by 4 times to enable simultaneous transmission to more devices
  • Unique Design, More RAM, Better Processing - A unique housing design provides optimal heat dissipation, combined with a 1.0 GHz dual-core CPU and 512 MB High-Speed Memory, the AXE75 is designed for long-term reliability and performance.
  • EasyMesh-compatible - Extend network range even more by adding EasyMesh-compatible routers, extenders, or wireless powerline adapters for a seamless, whole-home connection. Eliminate dead zones, drops, and lag as you move across your home.

Accordingly, “5G-related” is not a confirmed technical description of these cases. The supported conclusion is that telecom networks were targeted for espionage, while a direct 5G connection remains unestablished in the cited official accounts.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What did Singapore’s investigation find—and not find?

CSA’s account of Operation CYBER GUARDIAN describes an extended response to the UNC3886 activity: the operation lasted more than eleven months and involved over 100 cyber defenders across agencies. CSA said remediation and expanded monitoring had been implemented. Its statement that investigators had found no evidence of customer-record access or service disruption is time-bound to the 9 February 2026 report; it is not proof that access could never have occurred.

Rank #3
TP-Link AX5400 WiFi 6 Router (Archer AX73)
  • 𝐆𝐢𝐠𝐚𝐛𝐢𝐭 𝐖𝐢𝐅𝐢 𝐟𝐨𝐫 𝟖𝐊 𝐒𝐭𝐫𝐞𝐚𝐦𝐢𝐧𝐠 – Up to 5400 Mbps WiFi for faster browsing, streaming, gaming and downloading, all at the same time. Performance varies by conditions, distance to devices, & obstacles such as walls.
  • 𝐅𝐮𝐥𝐥 𝐅𝐞𝐚𝐭𝐮𝐫𝐞𝐝 𝐖𝐢𝐅𝐢 𝟔 𝐑𝐨𝐮𝐭𝐞𝐫 – Equipped with 4T4R and HE160 technologies on the 5 GHz band to enable max 4.8 Gbps ultra-fast connections.Power:12 V 2.5 A
  • 𝐂𝐨𝐧𝐧𝐞𝐜𝐭 𝐌𝐨𝐫𝐞 𝐃𝐞𝐯𝐢𝐜𝐞𝐬 – Supports MU-MIMO and OFDMA to reduce congestion and 4X the average throughput
  • 𝐄𝐱𝐭𝐞𝐧𝐬𝐢𝐯𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 - Covers up to 2,000 sq. ft. High-Power FEM, 6× Antennas, Beamforming, and 4T4R structures combine to adapt WiFi coverage to perfectly fit your home and concentrate signal strength towards your devices.
  • 𝐌𝐨𝐫𝐞 𝐕𝐞𝐧𝐭𝐬, 𝐋𝐞𝐬𝐬 𝐇𝐞𝐚𝐭 – Improved vented areas help unleash the full power of the router

Singapore Minister for Digital Development and Information Josephine Teo said: “Your actions, or inaction, can determine whether we succeed or fail in protecting our critical infrastructure, and our national security. I urge all of you to continue investing in upgrading your systems as well as your capabilities”.

Quick Recap

SaleBestseller No. 1
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5)
VPN SERVER: Archer AX21 Supports both Open VPN Server and PPTP VPN Server
$69.99

What can readers conclude?

  • Authorities have documented espionage-oriented access to telecom companies, with specific data theft and communications compromise reported by U.S. agencies.
  • The Canadian account provides a concrete network-device example, but its GRE-tunnel finding applies to at least one device, not automatically all three.
  • Singapore’s UNC3886 case shows a distinct operation with reported unauthorized access but, as of CSA’s February 2026 publication, no evidence of customer-record theft or service disruption.
  • These accounts do not verify a 5G-specific campaign, a campaign-wide victim count, or a campaign-wide financial loss figure.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.