CYBERSECURITYTRACKER
Permanent story citation

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11613

As cited

Copy frozen at (site build).

threat intel

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Chinese state-sponsored group Volt Typhoon is using a framework called 'Silent Train' that chains compromised devices together to obscure attack activity. The framework rotates through these connected devices on demand and has been deployed in zero-day attacks against high-value systems.

Why it matters: Critical infrastructure operators and government agencies need to hunt for signs of device chains and unusual lateral movement patterns, as this TTPs enables sophisticated persistence without traditional indicators of compromise.

VendorsCheck PointCiscoF5FortinetIvantiPalo Alto NetworksServiceNow
Actorsvolt typhoon
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Chinese state-sponsored group Volt Typhoon is using a framework called 'Silent Train' that chains compromised devices together to obscure attack activity. The framework rotates through these connected devices on demand and has been deployed in zero-day attacks against high-value systems.

Why it matters: Critical infrastructure operators and government agencies need to hunt for signs of device chains and unusual lateral movement patterns, as this TTPs enables sophisticated persistence without traditional indicators of compromise.

VendorsCheck PointCiscoF5FortinetIvantiPalo Alto NetworksServiceNow
Actorsvolt typhoon
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Chinese state-sponsored group Volt Typhoon is using a framework called 'Silent Train' that chains compromised devices together to obscure attack activity. The framework rotates through these connected devices on demand and has been deployed in zero-day attacks against high-value systems.

Why it matters: Critical infrastructure operators and government agencies need to hunt for signs of device chains and unusual lateral movement patterns, as this TTPs enables sophisticated persistence without traditional indicators of compromise.

VendorsCheck PointCiscoF5FortinetIvantiPalo Alto NetworksServiceNow
Actorsvolt typhoon
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Chinese state-sponsored group Volt Typhoon is using a framework called 'Silent Train' that chains compromised devices together to obscure attack activity. The framework rotates through these connected devices on demand and has been deployed in zero-day attacks against high-value systems.

Why it matters: Critical infrastructure operators and government agencies need to hunt for signs of device chains and unusual lateral movement patterns, as this TTPs enables sophisticated persistence without traditional indicators of compromise.

VendorsCheck PointCiscoF5FortinetIvantiPalo Alto NetworksServiceNow
Actorsvolt typhoon
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary