China's 'Liminal Panda' APT Attacks Telcos, Steals Phone Data

Liminal Panda is an advanced persistent threat, active since around 2020, that compromises telecom IT infrastructure across Asia and Africa to collect SMS, call records and device identifiers; the group uses techniques such as C2 infrastructure that emulates GSM, DNS-based hopping between providers, and traditional lateral movement to exfiltrate sensitive telecommunications metadata, and CrowdStrike links the activity to Chinese state intelligence objectives with low confidence.