Volt Typhoon is a state-sponsored cyber actor affiliated with the People's Republic of China, first observed in mid-2021. This group's primary motivation has evolved from traditional espionage to pre-positioning capabilities within critical infrastructure networks, particularly in the United States, to enable disruptive or destructive cyberattacks during potential future crises or conflicts, such as over Taiwan. What specifically sets Volt Typhoon apart is its heavy reliance on living-off-the-land (LOTL) techniques and the extensive use of compromised small office/home office (SOHO) network devices as proxy infrastructure. These methods allow them to obscure their origin, enhance stealth, and maintain long-term, undetected persistence within target environments. The group operates under multiple names, including BRONZE SILHOUETTE, Dev-0391, Insidious Taurus, Storm-0391, UNC3236, VANGUARD PANDA, and VOLTZITE.

Aliases del actor

BRONZE SILHOUETTEDev-0391Insidious TaurusStorm-0391UNC3236VANGUARD PANDAVOLTZITERedflyotros relacionados con herramientas de ataque como MimikatzProcDumpNbtscan

Actores similares

Aquatic Pandaactor · 1Mustang Pandaapt · 1APT27 (Emissary Panda)actor · 1Putter Pandaapt · 1Deep Pandaactor · 1anchor-pandaactor · 1aquatic-pandaactor · 1big-pandaactor · 1electric-pandaactor · 1eloquent-pandaactor · 1