What is ‘Volt Typhoon’?

Active since at least 2021, the Chinese-backed hacking group 'Volt Typhoon' was recently shut down by the US government. With a focus on critical infrastructure and espionage, Volt Typhoon employed preinstalled utilities, stealth, and living off the land tactics. The gang used stolen credentials to continue compromising home and small office devices. Volt Typhoon was notorious for using compromised network devices, including home routers, to route traffic, making detection difficult.