All articles tagged with #silent train
Lumen Technologies’ Black Lotus Labs revealed that the Chinese state-sponsored group Volt Typhoon used a covert network called Silent Train to infiltrate US critical infrastructure. This system relies on rotating chains of compromised devices to bypass detection, exploiting zero-day vulnerabilities in management platforms to steal credentials and maintain long-term access.
Lumen Technologies’ Black Lotus Labs identified a covert network called Silent Train, attributed to the China-linked group Volt Typhoon, which facilitated four confirmed zero-day exploitation campaigns. The network utilized rotating chains of compromised SOHO, IoT, and enterprise devices to maintain persistent access to critical U.S. infrastructure. Targets included telecommunications, defense, and energy sectors, with specific focus on Hawaii, California, and Texas. The infrastructure evolved from ephemeral relays to hybrid models using reverse tunnels, emphasizing anti-forensic techniques and compartmentalization to evade detection.