Forecasting Typhoons: Volt Typhoon Next Steps in OT Disruption
summary
Volt Typhoon is a PRC-linked collection of intrusions with broad access to US and Pacific critical infrastructure (Guam power authorities, West Coast ports, small electric co-ops) but no publicly attributed disruptive impact yet. Activity uses living off the land techniques, custom and nonstandard tooling like fast reverse proxies and extensive proxy networks. Likely objectives are credential harvesting, OT reconnaissance and prepositioning for either targeted outages (timed for military effect) or an indiscriminate wormable wiper campaign; integrity attacks remain hard and rare.
AI-written summary · about
chapters (6)
- 0:00Volt Typhoon introduction
- 3:34What Volt Typhoon is
- 7:03OT disruption types
- 16:50Current Volt Typhoon state
- 18:35Projected Volt Typhoon actions
- 26:37Future outlook for Volt Typhoon
related talks
45mHiding in Plain Sight: Hunting Volt Typhoon Cyber Actors
41mThe Phaaaaaaaaantom of the Salt Typhoon is there, inside i-SOON
28mRising Tide Redux: Leviathan's Supply Chain Attacks & Kinetic Naval Intervention
29mCritical Infrastructure Network Attacks: Code Red, Alert Network Operators
39mThe Renaissance of Cyber Physical Offensive Capabilities
21mCritical infrastructure and IoT: How to harden what you can’t replace
53mThe Evolution of Industrial Cyberthreats: Year in Review Report
50mJoin the Mission to Strengthen the Industrial Ecosystem