Cyber threats / Threat actors

Volt Typhoon

CN Suspected sponsor: China · ATT&CK G1017
0
APAC targets
81
Techniques
1
Incidents
0
News · 30d
Profile
Also known as: BRONZE SILHOUETTE, DazedToad, DEV-0391, Insidious Taurus, Storm-0391, UNC3236, VANGUARD PANDA, VOLTZITE

[Microsoft] Volt Typhoon, a state-sponsored actor based in China that typically focuses on espionage and information gathering. Microsoft assesses with moderate confidence that this Volt Typhoon campaign is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises.

[Secureworks] BRONZE SILHOUETTE likely operates on behalf the PRC. The targeting of U.S. government and defense organizations for intelligence gain aligns with PRC requirements, and the tradecraft observed in these engagements overlap with other state-sponsored Chinese threat groups.

ATT&CK techniques · 81
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Stealth
Defense Impairment
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Incidents attributed
In the news
  • No Asia-Pacific article names this actor yet.
Targets
No victim countries in the sources.
Relevance to the EU
EU relevance: Low
No EU member state among its known victims and no overlap with EU projects
No EU cooperation projects recorded in its target countries.
References
Sources: MISP, MITRE