The Typhoon family, comprising Volt Typhoon, Flax Typhoon, and Salt Typhoon, is a state-sponsored hacking group from China that's increasingly targeting U.S. government agencies and critical infrastructure. Volt Typhoon specializes in stealthy operations, using legitimate tools to bypass detection and infiltrate systems, aiming to facilitate large-scale cyberattacks during geopolitical crises. Flax Typhoon takes a longer-term approach by creating botnets from compromised devices to gather intelligence. Their operations reflect a growing sophistication in state-sponsored cyber activities, threatening national security by compromising vital systems and escalating financial fraud linked to telecom sectors.
Volt Typhoon specializes in infiltrating critical infrastructure and utilizes 'living-off-the-land' techniques to evade detection. Their goal is to enable future cyberattacks.
With a long-term focus, Flax Typhoon employs techniques like botnets formed from compromised devices to silently harvest sensitive information over time.
Collection
[
|
...
]