Security · Updated 28 Oct, 09:30 pm IST
Chinese group Volt Typhoon uses 'Silent Train' to hide zero-day attacks
Why it matters for readers: This explains how a sophisticated hacking group can quietly move through networks and exploit unknown software bugs to target important services.
- Silent Train is a framework that uses rotating chains of connected compromised devices, cleaned up after operations and continuously refreshed.1
- Black Lotus Labs tracked Silent Train for three years and confirmed Volt Typhoon exploited at least four zero-day vulnerabilities in these operations.1
- Observed targets include telecommunications firms, government agencies, defense contractors, educational institutions, utilities, satellite service providers, IT firms, transportation, aviation and emergency services.1
- Most targeted regions in observations were California, Texas and Hawaii, which researchers say suggests a focus on Indo‑Pacific matters.1
- Researchers say Silent Train deployments were partly fuelled by the FBI's disruption of the KV‑Botnet previously used by Volt Typhoon to evade detection.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started