Volt Typhoon Used a Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-linked cyber espionage group Volt Typhoon was attributed to the now-disrupted covert access network Silent Train, which was used for zero-day exploitation and strategic access. The network consisted of rapidly rotating chains of compromised SOHO, IoT, and enterprise devices and was used for activities including vulnerability exploitation, credential access, and data exfiltration.