Volt Typhoon
BRONZE SILHOUETTEVanguard PandaDEV-0391UNC3236VoltziteInsidious TaurusDazedToad
ChinaAssessed state-sponsored, PRC-nexus
Volt Typhoon is a People's Republic of China (PRC) state-sponsored actor that has been active since at least 2021, primarily targeting critical infrastructure organizations in the US and its territories including Guam. Volt Typhoon's targeting and pattern of behavior have been assessed as pre-positioning to enable lateral movement to operational technology (OT) assets for potential destructive or disruptive attacks.
MITRE ATT&CK Techniques
T1003.001T1003.003T1005T1006T1007T1010T1012T1016T1016.001T1018T1021.001T1027.002T1033T1036.005T1036.008T1046T1047T1049T1056.001T1057T1059.001T1059.003T1059.004T1068T1069T1069.001T1069.002T1070.004T1070.007T1074T1074.001T1078T1078.002T1083T1087.001T1087.002T1090T1090.001T1090.003T1105T1112T1113T1120T1124T1133T1140T1190T1217T1218T1497.001T1505.003T1518T1552T1552.004T1555T1555.003T1560.001T1570T1573.001T1584.003T1584.004T1584.005T1584.008T1587.004T1588.002T1588.006T1589T1589.002T1590T1590.004T1590.006T1591T1591.004T1592T1593T1594T1596.005T1614T1654T1680T1685.005
Associated Malware
FRPImpacketMimikatzNetNltestPingPsExecRegSysteminfoTasklistVersaMemWevtutilcertutilcmdipconfignetshnetstat
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.