Volt Typhoon
No sourced public emblem in this profile.
research profile · reported nexus: CN (not nationality)
[Microsoft] Volt Typhoon, a state-sponsored actor based in China that typically focuses on espionage and information gathering. Microsoft assesses with moderate confidence that this Volt Typhoon campaign is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises. [Secureworks] BRONZE SILHOUETTE likely operates on behalf the PRC. The targeting of U.S. government and defense organizations for intelligence gain aligns with PRC requirements, and the tradecraft observed in these engagements overlap with other state-sponsored Chinese threat groups.
Source-reported aliases: BRONZE SILHOUETTE, VANGUARD PANDA, UNC3236, Insidious Taurus, VOLTZITE, Dev-0391, Storm-0391. Associations do not prove equivalence.
Kinwilder analysis
Reduce the gap between legitimate administrative activity and unexplained administrative activity. Preserve account, device and network context rather than treating one command or binary as decisive attribution evidence. Technique-level defenses remain useful when country attribution is uncertain.
Target geography
Catalog-listed countries (associations, not attack counts): No country-level metadata
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://attack.mitre.org/groups/G1017/
https://unit42.paloaltonetworks.com/volt-typhoon-threat-brief/
https://www.dragos.com/threat/voltzite/