Volt Typhoon: China Unleashes Malicious Code on U.S. Military Infrastructure

A People’s Republic of China (PRC) cyberespionage group Microsoft and the U.S. government called Volt Typhoon allegedly “breached the U.S. Navy infrastructure,” according to the Secretary of the Navy Carlos Del Toro, as reported by Industrial Cyber. The NSA, CISA, and Microsoft announced the malicious breach of “critical communications, maritime and transportation infrastructure” in the U.S. and Guam on May 24, 2023. Both Microsoft and officials from the U.S. government seem to believe the incursions are “state-sponsored” attacks using, in some cases, home networks to breach security systems. China has denied state-sponsored hacking of U.S. infrastructure.

Microsoft Finds Volt Typhoon Malware in Guam

Microsoft apparently found Volt Typhoon’s malicious computer code around the time NSA officials were investigating the Chinese balloon incident. The “mysterious computer code appear[ed] in telecommunications systems in Guam and elsewhere in the United States,” according to Microsoft. Guam is of particular interest to China’s PRC because of its strategic air base and its ports. With the code, the PRC can enter undetected through homes with “internet-connected consumer devices.” According to Microsoft:

“Volt Typhoon proxies all its network traffic to its targets through compromised SOHO (Small Office Home Office) network edge devices (including routers). By proxying through these devices, Volt Typhoon enhances the stealth of its operations and lowers overhead costs for acquiring infrastructure. Once Volt Typhoon gains access to a target environment, they begin conducting hands-on-keyboard activity via the command line. Some of these commands appear to be exploratory or experimental, as the operators adjust and repeat them multiple times. They rely on living-off-the-land commands to find information on the system, discover additional devices on the network and exfiltrate data.”

Microsoft believes the malware is being used to prepare for future geopolitical crises between the U.S. and China, such as an invasion of Taiwan, for example. If you know anything about Chinese warfare strategy, this is not a particularly farfetched hypothesis. The Chinese often lay the groundwork for their strategic operations well in advance of a strike.

The malicious code may, according to the N.Y. Times, be “‘a ticking time bomb’ that could give China the power to interrupt or slow American military deployments or resupply operations by cutting off power, water, and communications to U.S. military bases. But its impact could be far broader because that same infrastructure often supplies the houses and businesses of ordinary Americans, according to U.S. officials.”

READ MORE HERE

By Published On: August 1, 2023Categories: UncategorizedComments Off on Volt Typhoon: China Unleashes Malicious Code on U.S. Military Infrastructure

Share This Story, Choose Your Platform!

About the Author: Patriotman

Patriotman currently ekes out a survivalist lifestyle in a suburban northeastern state as best as he can. He has varied experience in political science, public policy, biological sciences, and higher education. Proudly Catholic and an Eagle Scout, he has no military experience and thus offers a relatable perspective for the average suburban prepper who is preparing for troubled times on the horizon with less than ideal teams and in less than ideal locations. Brushbeater Store Page: http://bit.ly/BrushbeaterStore

GUNS N GEAR

Categories

Archives