CyberWallSECURITY

Home / Security journal / Critical infrastructure

Critical infrastructure · Advisory archive

Volt Typhoon and the challenge of persistent access

A joint advisory described PRC state-sponsored actors maintaining access to U.S. critical infrastructure and using living-off-the-land techniques. Familiar administrative tools can make malicious activity harder to distinguish from routine work.

This briefing explains a public 2024 advisory. It is not a live incident feed; consult the original source and current vendor guidance for updates.

What the advisory tells us

The agencies confirmed compromises in the IT environments of multiple critical infrastructure organizations, including communications, energy, transportation and water systems. Their assessment concerned potential disruption, not simply theft of information.

What teams can do

Review remote access and administrative activity against a baseline. Preserve logs, investigate unusual credential use, and reduce unnecessary privileges.

Read the original advisory

FBI IC3 / federal partners: source advisory (PDF) ↗

The linked advisory is an independent government source. It does not endorse CyberWall or its products.

Continue reading

Why small-office routers deserve security attention

Read next →