Chile probes telecom cyberespionage

Chile’s PDI and the Centro Norte Metropolitan Prosecutor’s Office have opened inquiries to verify a complaint backed by information from the United States about possible cyberattacks on devices located in Chile, in the case known as the "Chinese cable."

What investigators are examining

According to Emol’s coverage, the document submitted to prosecutors mentions an actor identified as "Lilac Typhoon" or DEV-0234, described as a botnet that allegedly would be used by actors linked to the Chinese People’s Liberation Army. The complaint cited by the PDI also points to possible cyberattacks against multiple private telecom companies in Chile and warns about risks to the privacy and personal data of mobile phone users.

BioBioChile also reported that prosecutors are handling the case as computer sabotage and that, according to that report, tools such as ShadowPad were detected for remote access and espionage.

What the reports say

Revista Seguridad said U.S. intelligence reports alerted the Chilean government to cyberespionage operations using malware in telecom networks in Chile, with references to Entel, Movistar and Telmex. That publication added that the initial reports attributed the malware with network reconnaissance, metadata extraction and backdoor installation, rather than an immediate disruption of services.

Vilas Radio reported that the alert was allegedly triggered after a complaint delivered to former president Gabriel Boric in February. It also said forensic work is aimed at identifying IP addresses and measuring the scope of the infection.

For now, attribution and the full scope of the case remain under review, and the information made public rests on intelligence reports and ongoing inquiries by the PDI and the Prosecutor’s Office.