China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days
X Cyber Group (XCyber?)
We work with clients to keep data, people and businesses protected within the geography of the internet.
On 12 March, ICS/OT security firm Dragos published a case study describing an intrusion attributed to the notorious Chinese threat actor Volt Typhoon into the US electric grid. The target was Littleton Electric Light and Water Departments (LELWD), a small public power utility in Massachusetts that serves Littleton and Boxborough. Dragos said the LELWD breach was discovered in November 2023, just before Thanksgiving, and an investigation showed that the hackers had been in the organisation’s network since February 2023, for more than 300 days.??
Volt Typhoon came to light in May 2023, when Microsoft reported that the group, which the tech giant linked to the Chinese Government, had been targeting US critical infrastructure in espionage operations. The threat actor has since made many headlines due to its sophistication, its botnets, and its use of zero-days.?
Read more here.