Hackers are used in almost every country in the world to gather intelligence information. The United States and Russia use intelligence groups, such as Fancy Bear and Equation Group.
As recently as Wednesday, Microsoft Corp said Volt Typhon was “pursuing the development of capabilities that could disrupt critical communications infrastructure between the United States and the Asia region during future crises.” This statement immediately raised concerns about tensions between China and the United States over Taiwan. Conflicts between China and the United States may lead to cyberattacks across the Pacific.
What exactly is the Volt Typhoon?
The Volt Typhoon is actually a supposed hacker group. The group is believed to be backed by China. The Volt Typhoon is said to have intelligence gathering and digital sabotage capabilities.
The question is whether the Volt Typhoon is really a serious threat to American infrastructure or is it simply a new group of digital spies.
The Typhoon Group and possible threats
Volt Typhoon is considered a major threat to American infrastructure. The group’s possible threats are:
The threat of a future crisis
Almost every country in the world uses hackers to obtain intelligence. However, experts are concerned that tensions between China and the United States could lead to cyberattacks across the Pacific in the future.
The threat of espionage
Experts fear espionage. Experts see Volt Typhoon as a team of hackers out to sabotage US infrastructure amid tensions over Taiwan.
Volt Typhoon, a Chinese state-sponsored actor, uses TTP of Earth Life (LotL) and hands-on-keyboard to evade detection and persist in an espionage campaign targeting critical infrastructure organizations in Guam and the rest of the USA. . https://t.co/FZxjfiA0Hw
– Microsoft Threat Intelligence (@MsftSecIntel)
May 24, 2023
Microsoft’s assessment is rated as “moderately confident,” meaning that a theory has credible foundations and is reasonable, but has not yet been fully corroborated. There are many researchers who have identified and interpreted the various aspects of the group, however, not many consider any evidence of sabotage.
So far, the Volt Typhoon appears to be aimed at hiding data from organizations that hold information related to the US government or military, as claimed by Marc Burnard, Secureworks.
Secureworks calls the Volt Typhoon the “Bronze Silhouette,” and Marc Burnard says it is designed to be used primarily for espionage purposes.
Volt Typhoon may turn out to be a stealth storm
Almost all cyber spies try to hide their tracks, with Microsoft and other experts suggesting that Volt Typhoon was a silent operator that concealed its traffic by routing it through hacked network equipment, such as home routers. These turn out to be deleted evidence of well-planned invasion of the victim’s records.
China, on the other hand, relentlessly denies that piracy was committed in the Volt Typhoon affair. However, the documentation of cyberespionage campaigns in Beijing has been in preparation for no less than twenty years. Over the past 10 years, espionage has become a major focus as investigators in the West have linked breaches to particular units of the People’s Liberation Army. U.S. law enforcement has accused countless Chinese agents of hiding secrets from the United States.
In a blog post, Secureworks stated that Volt Typhoon’s interest in operational security likely has its roots in the US accusations along with increased pressure coming from Chinese leaders to refrain from scrutiny of cyberespionage acts.
Other hacker groups around the world
Some other hacker groups around the world are:
|Group of equations||USA|
|Lazarus Group||North Korea|
|APT29 (Cozy Bear)||Russia|
|Commentary Team (APT1)||Porcelain|
: India to launch new petaFLOP supercomputers in 2023. What are petaFLOPs?