Volt Typhoon used covert Silent Train network for zero-day attacks

The Hacker News and BleepingComputer both report that the Chinese state-sponsored hacking group Volt Typhoon used a covert access network framework dubbed Silent Train to deploy zero-day attacks and secure strategic access against high-value targets. The network has now been disrupted. [1][2]

According to BleepingComputer, the Silent Train framework operated by relying on rotating chains of connected devices that were compromised on demand. The group used this setup against select targets, cleaned it up after each operation, and refreshed the infrastructure continuously to remain hidden. [2]

The Hacker News reports that the group utilized Silent Train across four distinct zero-day exploitation campaigns. Zero-day vulnerabilities are software security holes unknown to developers or those capable of mitigating them, allowing attackers to exploit them before patches exist. [1][9]

Volt Typhoon is a China-nexus cyber espionage group, and state-sponsored cyber operations linked to China involve deliberate attacks targeting information systems for tactical and strategic purposes. [1][8]