Summary
Volt Typhoon (also Vanguard Panda) continues pre-positioning operations inside US, Japanese, and Australian critical infrastructure networks. Using living-off-the-land techniques and compromised SOHO routers as relay nodes, the group has maintained persistent access to water utilities, energy grids, transportation, and communications infrastructure across the Indo-Pacific. May 2026 CISA guidance highlights new detections in Guam-based military support infrastructure.
Where
Japan
Australia
Philippines
Also: United States, Guam
Sectors: Energy, Water & Wastewater, Transportation, Communications, Defense Industrial Base
EU relevance
Medium
Hit defense industrial base in Australia, where the EU has Peace & Security projects; 3 more such overlaps
Graded by rules: EU member states affected, EU response, EU sanctions, EU projects in the sector hit.