Security News > 2023 > May > Chinese hackers breach US critical infrastructure in stealthy attacks
Microsoft says a Chinese cyberespionage group it tracks as Volt Typhoon has been targeting critical infrastructure organizations across the United States, including Guam, since at least mid-2021.
"Microsoft assesses with moderate confidence that this Volt Typhoon campaign is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises," the Microsoft Threat Intelligence team said.
As Mandiant Intelligence Chief Analyst John Hultquist told BleepingComputer, these intrusions into US critical infrastructure orgs are likely part of a concerted effort to provide China with access in the event of a future conflict between the two countries.
"States conduct long-term intrusions into critical infrastructure to prepare for possible conflict, because it may simply be too late to gain access when conflict arises. Similar contingency intrusions are regularly conducted by states."
"Over the last decade, Russia has targeted a variety of critical infrastructure sectors in operations that we do not believe were designed for immediate effect. China has done the same in the past, targeting the oil and gas sector. These operations are aggressive and potentially dangerous, but they don't necessarily indicate attacks are looming."
Critical infrastructure also hit by supply chain attack behind 3CX breach.
News URL
Related news
- US sanctions APT31 hackers behind critical infrastructure attacks (source)
- Chinese hackers hid in US infrastructure network for 5 years (source)
- Chinese Hackers Operate Undetected in U.S. Critical Infrastructure for Half a Decade (source)
- CISA shares critical infrastructure defense tips against Chinese hackers (source)
- U.S. Sanctions 6 Iranian Officials for Critical Infrastructure Cyber Attacks (source)
- Chinese Hackers Exploited FortiGate Flaw to Breach Dutch Military Network (source)
- Volt Typhoon not the only Chinese crew lurking in US energy, critical networks (source)
- Chinese Hackers Using Deepfakes in Advanced Mobile Banking Malware Attacks (source)
- Critical infrastructure software maker confirms ransomware attack (source)
- Russian hackers shift to cloud attacks, US and allies warn (source)