Volt Typhoon: alleged PRC pre-positioning in US infrastructure
Alleged: Reported or claimed; not established in the public record.
On 7 February 2024 CISA, the NSA and the FBI issued an advisory assessing that People’s Republic of China state-sponsored cyber actors are seeking to “pre-position” themselves on IT networks for disruptive or destructive attacks on US critical infrastructure in the event of a major crisis or conflict. The agencies said Volt Typhoon’s pattern of behaviour is not consistent with traditional espionage.
Documented
The joint advisory is public and states an assessment “with high confidence” that the actors are pre-positioning to enable lateral movement to operational-technology assets.
Claimed, disputed or not established
This is a government assessment, not a court finding, and the advisory does not name a specific PRC agency or unit. China’s response is not part of the source opened, so none is quoted.
Sources (opened in a new tab)
- CISA advisory AA24-038a: PRC state-sponsored actors compromise US critical infrastructure ↗https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-038a
Connected
- Section: China
- Countries: China, United States
- Case board · Timeline (2024) · Document vault