D
CyberChina

Volt Typhoon

State-sponsored cyber threat groupActivePending verification

Also known as: Vanguard Panda, BRONZE SILHOUETTE, Voltzite

CyberCHN
Identification silhouette. Not drawn to scale between entries.
Fact cardConfidence · Source
System
TypeState-sponsored cyber threat group
Alternative designationsVanguard Panda, BRONZE SILHOUETTE, Voltzite
ProliferationOrigin country only
Active since2021At least 2021Med[1]
MITRE ATT&CK IDG1017High[1]
Attribution and activity
Attributed sponsorPeople's Republic of China (state-sponsored)Med[1]
TargetsPower, water, communications and transportation infrastructure in the U.S. and GuamMed[1]
Notable activityPre-positioning in U.S. critical infrastructure networksMed[1]
Summary

PRC state-sponsored actor targeting U.S. critical infrastructure, including Guam, using living-off-the-land techniques.

Draft entry. Values come from the cited public sources and are awaiting editor verification.
CompareJSON
Operators
China
Sources
  1. Volt Typhoon, Group G1017, MITRE ATT&CK
    Published/updated 2026-07-31 · Tier 2 · checked 2026-10-03
Change log
  • 2026-10-03 Initial draft entry from cited open sources
  • 2026-10-03 Added identification art