Keyword: volttyphoon
-
This whole thing with China goes well beyond trade issues. We have known (or, at least, suspected) for years that China has been making cyber-incursions into American networks and systems. Now, in an exclusive Wall Street Journal report from Cybersecurity and Intelligence reporter Dustin Volz, we learn that in December, China made a tacit admission of being behind a series of attacks on American infrastructure.Chinese officials acknowledged in a secret December meeting that Beijing was behind a widespread series of alarming cyberattacks on U.S. infrastructure, according to people familiar with the matter, underscoring how hostilities between the two superpowers are...
-
In December 2023, for 17 continuous days, a fleet of drones appeared at night over Langley Air Force Base (AFB), Virginia and other facilities in the greater Virginia Beach area. This was reported at the time, but the story was fleeting. Two other events occurred in the area that are relevant to the story. In February 2023, a pair of F-22s from Langley shot down the Chinese spy balloon as it exited the United States over South Carolina into the Atlantic Ocean. In January 2024, a Chinese graduate student at the University of Minnesota, was arrested for flying a drone...
-
Chinese hackers are preparing to launch a major attack on critical U.S. infrastructure and have already infiltrated multiple companies according to the FBI. FBI Director Chris Wray revealed today China is developing the capability to cause significant damage to our critical infrastructure at a time of their choosing. The only question is the time to launch a catastrophic blow. “China is developing the ability to physically wreak havoc on our critical infrastructure at a time of its choosing,” Wray said at the 2024 Vanderbilt Summit on Modern Conflict and Emerging Threats. “Its plan is to land low blows against civilian...
-
Last May I wrote about a group of Chinese hackers who'd been identified by Microsoft after malware was discovered in telecom systems on the island of Guam. Microsoft named the hacking group "Volt Typhoon."Microsoft called the hacking group “Volt Typhoon” and said that it was part of a state-sponsored Chinese effort aimed at not only critical infrastructure such as communications, electric and gas utilities, but also maritime operations and transportation. The intrusions appeared, for now, to be an espionage campaign. But the Chinese could use the code, which is designed to pierce firewalls, to enable destructive attacks, if they choose.Today,...
-
The goal, the report describes, is to find ways to “sow panic and chaos or snarl logistics in the event of a U.S.-China conflict in the Pacific.” China’s threat to America now includes schemes to disrupt power and water supplies, communications and even transportation systems, according to officials cited in a new report. Experts quoted by the Washington Post explained that hackers linked to China’s People’s Liberation Army already have succeeded in breaching “the computer systems of about two dozen critical entities over the past year.” The goal, the report describes, is to find ways to “sow panic and chaos...
-
Beijing, now Moscow.… Who else is hiding in broadband gateways?The US government today said it disrupted a botnet that Russia's GRU military intelligence unit used for phishing expeditions, spying, credential harvesting, and data theft against American and foreign governments and other strategic targets. This latest court-authorized takedown happened in January, and involved neutralizing "well over a thousand" home and small business routers that had been infected with the Moobot malware, which is a Mirai variant, according to FBI Director Christopher Wray, speaking at the Munich Cyber Security Conference on Thursday. Moobot can be used to remote-control compromised devices and launch...
-
Microsoft has uncovered stealthy and targeted malicious activity focused on post-compromise credential access and network system discovery aimed at critical infrastructure organizations in the United States. The attack is carried out by Volt Typhoon, a state-sponsored actor based in China that typically focuses on espionage and information gathering. Microsoft assesses with moderate confidence that this Volt Typhoon campaign is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises. Volt Typhoon has been active since mid-2021 and has targeted critical infrastructure organizations in Guam and elsewhere in the United States....
|
|
|