APT · China
PRC-linked actor living off the land in US critical infrastructure, focusing on communications and energy sectors.
Aliases: BRONZE SILHOUETTE, Vanguard Panda
Motivation: Pre-positioning for critical infrastructure disruption
Data Exfiltration
Field telemetry from Toronto correlates with Volt Typhoon Router Implant Found in Telecom Backbone.
Ransom Demand
Field telemetry from Moscow correlates with FIN7 Deploys Custom Backdoor Against Retail POS Systems.
Lateral Movement
Field telemetry from Singapore correlates with Telecom Provider BGP Hijack Routes Traffic Through Adversary AS.
Ransom Demand
Field telemetry from Toronto correlates with Volt Typhoon Router Implant Found in Telecom Backbone.
Resolution
Field telemetry from Moscow correlates with FIN7 Deploys Custom Backdoor Against Retail POS Systems.
Data Exfiltration
Field telemetry from Singapore correlates with Telecom Provider BGP Hijack Routes Traffic Through Adversary AS.
Reconnaissance
Field telemetry from Moscow correlates with FIN7 Deploys Custom Backdoor Against Retail POS Systems.
Ransom Demand
Field telemetry from Singapore correlates with Telecom Provider BGP Hijack Routes Traffic Through Adversary AS.
Resolution
Field telemetry from Toronto correlates with Volt Typhoon Router Implant Found in Telecom Backbone.