[Microsoft] Volt Typhoon, a state-sponsored actor based in China that typically focuses on espionage and information gathering. Microsoft assesses with moderate confidence that this Volt Typhoon campaign is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises. [Secureworks] BRONZE SILHOUETTE likely operates on behalf the PRC. The targeting of U.S. government and defense organizations for intelligence gain aligns with PRC requirements, and the tradecraft observed in these engagements overlap with other state-sponsored Chinese threat groups.
The same group is tracked under different names by different vendors.
| Vendor | Name |
|---|---|
| Various | Volt Typhoon |
| Microsoft (legacy) | Vanguard Panda |
| OSINT | BRONZE SILHOUETTE |
| OSINT | UNC3236 |
| OSINT | Insidious Taurus |
| OSINT | VOLTZITE |
| OSINT | Dev-0391 |
| OSINT | Storm-0391 |
| OSINT | DazedToad |
No IOCs extracted yet from reports naming this actor.
Every report in the Global Intel Library that names Volt Typhoon, newest first. Open any report to see the full analysis with provenance.
No reports in the Lore library name this actor yet.
Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to Volt Typhoon. Each row shows why it was linked and where it came from.
No feed indicators linked to this actor yet. Feeds are checked every hour.
Open-source reports about this actor collected from MISP Galaxy and MITRE ATT&CK.