Adversary Intelligence — 2026-05-21

War on the Rocks Analysis: Salt Typhoon Reveals China Data-Centric Intelligence Strategy Challenging US Exquisite Collection Model

BLUFBeijing's penetration of lawful intercept portals converts Salt Typhoon from espionage nuisance into a strategic counterintelligence wound, and fresh telecom or critical infrastructure intrusions are likely to surface by May 2027.

A May 20 War on the Rocks analysis by a Department of the Air Force cyber policy adviser describes Salt Typhoon as evidence of a Chinese "machine overmatch" model favoring bulk telecom collection over exquisite single-target access 1. A joint advisory issued August 27 by CISA, NSA, FBI, and more than a dozen allied agencies names at least three Chinese commercial firms providing services to PRC intelligence, documents intrusions across U.S., UK, Australian, and Canadian networks since at least 2021, and notes no zero-day exploits were observed 2. War on the Rocks reports the actors also compromised U.S. telecom portals used for court-authorized wiretaps 13. FBI cyber chief Brett Leatherman has said Salt Typhoon is "largely contained" in U.S. networks but acknowledged the same footholds could support destructive action 3.

Analysis
The intercept portal compromise gives Beijing visibility into U.S. court-authorized surveillance targets and the tradecraft protecting them, a counterintelligence exposure beyond bulk collection. Per a CISA joint advisory corroborated by War on the Rocks, the campaign's unbroken tempo since 2021, zero-day-free methods, and MSS's compelled contractor ecosystem sustain high confidence. Authorities will likely confirm new telecom or critical infrastructure intrusions by May 21, 2027. Partial eviction does not dismantle that ecosystem. Integration friction may constrain Beijing's ability to convert raw collection into actionable intelligence at operational speed, but the legal compulsion framework persists. Confirmed intrusions would accelerate mandatory telecom monitoring legislation and FCC lawful-intercept rulemaking; absence sustains industry resistance.

3 sources