CNG1017

Volt TyphoonVolt Typhoon

Also known as: BRONZE SILHOUETTE · VANGUARD PANDA · UNC3236 · Insidious Taurus · VOLTZITE · Dev-0391 · Storm-0391 · Volt Typhoon

Origin
CN
Known aliases
8

Profile

[Microsoft] Volt Typhoon, a state-sponsored actor based in China that typically focuses on espionage and information gathering. Microsoft assesses with moderate confidence that this Volt Typhoon campaign is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises. [Secureworks] BRONZE SILHOUETTE likely operates on behalf the PRC. The targeting of U.S. government and defense organizations for intelligence gain aligns with PRC requirements, and the tradecraft observed in these engagements overlap with other state-sponsored Chinese threat groups.

Aliases· 8

BRONZE SILHOUETTEVANGUARD PANDAUNC3236Insidious TaurusVOLTZITEDev-0391Storm-0391Volt Typhoon

MITRE ATT&CK Group crosswalk

G1017

References

  1. https://www.secureworks.com/blog/chinese-cyberespionage-group-bronze-silhouette-targets-us-government-and-defense-organizations
  2. https://www.microsoft.com/en-us/security/blog/2023/05/24/volt-typhoon-targets-us-critical-infrastructure-with-living-off-the-land-techniques/
  3. https://unit42.paloaltonetworks.com/volt-typhoon-threat-brief/
  4. https://www.dragos.com/threat/voltzite/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
Flax Typhoon
Actor
Storm-0558
Actor
APT31
Actor
BRONZE VAPOR
Actor
Raspberry Typhoon
Actor
MUSTANG PANDA
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.