China-sponsored hacker group Volt Typhoon targeting ‘critical’ U.S. infrastructure, Microsoft says

Microsoft Corp.
MSFT,
-0.45%
security researchers said late Wednesday they uncovered a China state-sponsored hack against critical U.S. infrastructure. In a blog post, Microsoft said it “uncovered stealthy and targeted malicious activity focused on post-compromise credential access and network system discovery aimed at critical infrastructure organizations in the United States.” The attack is being led by Volt Typhoon, a state-sponsored actor based in China, “that typically focuses on espionage and information gathering.” Microsoft said the group has been active since mid-2021 and has already targeted Guam and other unspecified targets in the U.S., and sees Volt Typhoon developing capabilities “that could disrupt critical communications infrastructure between the United States and Asia region during future crises.”