China’s ‘Volt Typhoon’ quietly built another hacking network following US crackdown, new findings say

Researchers uncover Volt Typhoon’s covert, ephemeral network

The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks.

China’s ‘Volt Typhoon’ quietly built another hacking network following US crackdown, new findings say

New research traces a three-year operation targeting government, defense and critical infrastructure networks. Sources say Energy Department facilities and utilities have also been affected.

Volt Typhoon hides zero-day attacks using ‘Silent Train’ framework

Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. The framework has been dubbed Silent Train because the threat actor uses it against select targets, cleans it up after each operation, and refreshes it continuously. Researchers at Black Lotus Labs, the threat research division of comm…