Volt Typhoon

Volt Typhoon (also known as VANGUARD PANDA, BRONZE SILHOUETTE, Redfly, Insidious Taurus, Dev-0391, Storm-0391, UNC3236, or VOLTZITE) is an advanced persistent threat (APT) engaged in cyberespionage on behalf of the People's Republic of China. Active since at least mid-2021, the group is known to primarily target United States critical infrastructure. Volt Typhoon focuses on espionage, data theft, and credential access. According to Microsoft, the group goes to great lengths to avoid detection, and its campaigns prioritize capabilities which enable China to sabotage critical communications infrastructure between the US and Asia during potential future crises. The US government believes the group's goal is to slow down any potential US military mobilization that may come following a Chinese invasion of Taiwan. Volt Typhoon is believed to be run by the People's Liberation Army Cyberspace Force. The Chinese government denies the group exists.