Reportseverity: Critical2023-05-24
Volt Typhoon publicly named, targeting U.S. critical infrastructure
published by Microsoft Threat Intelligence
Actor
PRC state-sponsored actor focused on pre-positioning in U.S. critical infrastructure (communications, energy, transportation, water). Heavy use of living-off-the-land techniques and small-office/home…
Summary
Microsoft publicly disclosed Volt Typhoon, a PRC state-sponsored actor pre-positioning in U.S. critical infrastructure networks — communications, manufacturing, utilities, transportation, construction, maritime, government, IT, and education — with heavy use of living-off-the-land binaries.
Tags
lotlcritical-infrastructurepre-positioning