Advisoryseverity: Critical2024-02-07

Joint CISA/NSA/FBI advisory AA24-038A on Volt Typhoon

published by CISA

Actor

PRC state-sponsored actor focused on pre-positioning in U.S. critical infrastructure (communications, energy, transportation, water). Heavy use of living-off-the-land techniques and small-office/home…

Summary

CISA, NSA, FBI, and partners assessed with high confidence that Volt Typhoon's pre-positioning in U.S. critical infrastructure is intended to enable disruptive or destructive cyberattacks in the event of a major crisis or conflict — a notable shift in stated PRC intent.

Primary source

cisa.gov

Other Volt Typhoon events

2024-08-22Volt Typhoon exploits Versa Director zero-day (CVE-2024-39717)
2024-01-31DOJ disrupts KV-botnet of compromised SOHO routers
2023-05-24Volt Typhoon publicly named, targeting U.S. critical infrastructure

Summary

Tags

Primary source

Other Volt Typhoon events