Volt Typhoon hides zero-day attacks using 'Silent Train' framework

By Bill Toulas

AI Summary

Volt Typhoon has been operating a covert relay network dubbed 'Silent Train,' built on rapidly rotating chains of compromised devices used to mask zero-day attacks against high-value critical infrastructure targets. Lumen researchers documented the framework, which allows the group to conduct operations with minimal persistent infrastructure exposure. The technique significantly complicates attribution and blocking efforts, as indicators of compromise change frequently.

Read full article → https://www.bleepingcomputer.com/news/security/vol…

Relevance score: 87.0/100

# More from October 30

1
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen The Hacker News
2
New Cisco firewall zero-day exploited to crash SSL VPN devices BleepingComputer
3
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network SecurityWeek
5
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces The Hacker News
6
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility The Hacker News
7
Chrome extensions with 13.4 million installs caught hijacking searches BleepingComputer
8
Massive leak exposes 41,000 DHS workers and undercover ICE agents Ars Technica Security
9
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls The Hacker News
10
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys The Hacker News