Volt Typhoon - Security Ticks

Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs

CVE-2024-39717, Cyberwarfare, Nation-State, Versa Director, Volt Typhoon, Zero-Day / SecurityTicks

Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs 2024-08-28 at 19:01 By Ryan Naraine Amidst Volt Typhoon zero-day exploitation, Censys finds hundreds of exposed servers presenting ripe attack surface for attackers. The post Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs appeared first on SecurityWeek. […]

React to this headline:

Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs Read More »

Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day

Black Lotus Labs, China APT, Cyberwarfare, Featured, KV Botnet, Nation-State, Versa Director, Volt Typhoon / SecurityTicks

Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day 2024-08-26 at 21:17 By Ryan Naraine Malware hunters catch Chinese APT Volt Typhoon exploiting a zero-day in Versa Director servers used by ISPs and MSPs. The post Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day appeared first on SecurityWeek. This article is an

React to this headline:

Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day Read More »

US Treasury Slaps Sanctions on China-Linked APT31 Hackers

APT31, China APT, Cyberwarfare, Nation-State, Sanctions, Volt Typhoon / SecurityTicks

US Treasury Slaps Sanctions on China-Linked APT31 Hackers 2024-03-25 at 21:05 By Ryan Naraine The US Treasury Department sanctions a pair of Chinese hackers linked to “malicious cyber operations targeting US critical infrastructure sectors.” The post US Treasury Slaps Sanctions on China-Linked APT31 Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

US Treasury Slaps Sanctions on China-Linked APT31 Hackers Read More »

Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon

APT, China APT, Five Eyes, Government, Nation-State, Volt Typhoon / SecurityTicks

Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon 2024-03-20 at 15:01 By Ionut Arghire Government agencies in the Five Eyes countries warn critical infrastructure entities of Chinese state-sponsored hacking group Volt Typhoon. The post Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon appeared first on SecurityWeek. This article is

React to this headline:

Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon Read More »

Volt Typhoon Seen Exfiltrating Sensitive OT Data

Dragos, ICS, ICS/OT, Volt Typhoon / SecurityTicks

Volt Typhoon Seen Exfiltrating Sensitive OT Data 2024-02-20 at 16:16 By Eduard Kovacs Volt Typhoon and two other threat groups that emerged in 2023 can pose a serious threat to ICS/OT, according to industrial cybersecurity firm Dragos. The post Volt Typhoon Seen Exfiltrating Sensitive OT Data appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Volt Typhoon Seen Exfiltrating Sensitive OT Data Read More »

CISA: China’s Volt Typhoon Hackers Planning Critical Infrastructure Disruption

China, CISA, critical infrastructure, Malware & Threats, Nation-State, Volt Typhoon / SecurityTicks

CISA: China’s Volt Typhoon Hackers Planning Critical Infrastructure Disruption 2024-02-08 at 01:01 By Ryan Naraine New CISA alert includes technical mitigations to harden attack surfaces and instructions to hunt for the Chinese government-backed hackers. The post CISA: China’s Volt Typhoon Hackers Planning Critical Infrastructure Disruption appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

CISA: China’s Volt Typhoon Hackers Planning Critical Infrastructure Disruption Read More »

US Says it Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans

China, Cyberwarfare, Featured, Volt Typhoon / SecurityTicks

US Says it Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans 2024-02-01 at 04:31 By Associated Press Chinese government hackers are busily targeting water treatment plants, the electrical grid, transportation systems and other critical infrastructure inside the United States, FBI Director Chris Wray told lawmakers. The post US Says

React to this headline:

US Says it Disrupted a China Cyber Threat, but Warns Hackers Could Still Wreak Havoc for Americans Read More »

US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon

Cisco, KV Botnet, Nation-State, Netgear, Network Security, Volt Typhoon / SecurityTicks

US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon 2024-01-31 at 23:01 By Ryan Naraine The US government neutralizes a botnet full of end-of-life Cisco and Netgear routers being by a notorious Chinese APT group. The post US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon appeared first on

React to this headline:

US Gov Disrupts SOHO Router Botnet Used by Chinese APT Volt Typhoon Read More »

US Disrupted Chinese Hacking Operation Aimed at Critical Infrastructure: Report

China, Government, Volt Typhoon / SecurityTicks

US Disrupted Chinese Hacking Operation Aimed at Critical Infrastructure: Report 2024-01-30 at 16:46 By Eduard Kovacs US government reportedly disabled parts of a botnet-powered cyber campaign conducted by the Chinese threat actor Volt Typhoon. The post US Disrupted Chinese Hacking Operation Aimed at Critical Infrastructure: Report appeared first on SecurityWeek. This article is an excerpt

React to this headline:

US Disrupted Chinese Hacking Operation Aimed at Critical Infrastructure: Report Read More »

China-Linked Volt Typhoon Hackers Possibly Targeting Australian, UK Governments

China, China APT, Cyberwarfare, Volt Typhoon / SecurityTicks

China-Linked Volt Typhoon Hackers Possibly Targeting Australian, UK Governments 2024-01-11 at 17:31 By Ionut Arghire Chinese APT Volt Typhoon appears engaged in new attacks against government entities in the US, UK, and Australia. The post China-Linked Volt Typhoon Hackers Possibly Targeting Australian, UK Governments appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

China-Linked Volt Typhoon Hackers Possibly Targeting Australian, UK Governments Read More »

Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet

Black Lotus Labs, Featured, Fortinet, Nation-State, Netgear, Network Security, Volt Typhoon / SecurityTicks

Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet 13/12/2023 at 20:31 By Ryan Naraine Malware hunters have set eyes on an impossible to kill botnet packed with end-of-life SOHO routers and connects it to a Chinese APT targeting US critical infrastructure. The post Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet

React to this headline:

Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet Read More »

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure

critical infrastructure, Featured, ICS/OT, Nation-State, Volt Typhoon / SecurityTicks

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure 25/10/2023 at 19:17 By Ryan Naraine Mandiant’s Chief analyst urges critical infrastructure defenders to work on finding and removing traces of Volt Typhoon, a Chinese government-backed hacking team caught in a series of eyebrow-raising attacks against targets in Guam and the

React to this headline:

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure Read More »

AWS Using MadPot Decoy System to Disrupt APTs, Botnets

AWS, cloud security, cybercrime, MadPot, Nation-State, Sandworm, Volt Typhoon / SecurityTicks

AWS Using MadPot Decoy System to Disrupt APTs, Botnets 29/09/2023 at 21:01 By Ryan Naraine AWS says an internal threat intel decoy system called MadPot has successfully trapped nation state-backed APTs like Volt Typhoon and Sandworm. The post AWS Using MadPot Decoy System to Disrupt APTs, Botnets appeared first on SecurityWeek. This article is an

React to this headline:

AWS Using MadPot Decoy System to Disrupt APTs, Botnets Read More »