Details

• ID: TMPL0001

• Link: Volt Typhoon on MITRE ATT&CK (group G1017)

Description

Countermeasures for Techniques used by Volt Typhoon. > Volt Typhoon is a People's Republic of China (PRC) state-sponsored actor that has been active since at least 2021. Volt Typhoon typically focuses on espionage and information gathering and has targeted critical infrastructure organizations in the US including Guam. Volt Typhoon has emphasized stealth in operations using web shells, living-off-the-land (LOTL) binaries, hands on keyboard activities, and stolen credentials. > > \- <https://attack.mitre.org/groups/G1017/>