Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

A China-linked cyber espionage group known as Volt Typhoon has been linked to a covert network called Silent Train. Silent Train was used for zero-day exploitation and strategic access, and was first identified in late 2023. The network utilizes rotating chains of compromised devices, including SOHO, IoT, and enterprise infrastructure. This network was used in four zero-day exploitation campaigns. Silent Train has now been disrupted, according to a report by Lumen Technologies Black Lotus Labs. The report sheds light on the tactics used by Volt Typhoon to gain access to targeted systems.