CISA and Partners Release Advisory on PRC-sponsored Volt Typhoon Activity and Supplemental Living Off the Land Guidance

Summary:

A joint Cybersecurity Advisory (CSA) has been released by CISA, NSA, FBI, and other federal agencies and international organizations, warning of a threat by PRC state-sponsored actors, known as Volt Typhoon, to compromise and maintain persistent access to U.S. critical infrastructure. The advisory highlights living off the land (LOTL) techniques used by these actors to pre-position themselves on IT networks for potential disruptive or destructive cyber activity in the event of a major crisis or conflict with the United States. The advisory provides actionable information to help organizations recognize and detect Volt Typhoon techniques, assess potential compromises, and implement mitigations to secure their networks.