Access to water, energy, transport and communications networks held for disruption in a crisis rather than for collection.
CISA warned critical infrastructure leaders of urgent risk from Volt Typhoon and set out specific actions to prioritize protection of their organizations.
CISA, NSA and FBI assessed that PRC state-sponsored actors are pre-positioning on IT networks for disruptive or destructive attacks against US critical infrastructure in the event of a major crisis or conflict with the United States.
The first joint advisory on Volt Typhoon described abuse of tools already present in victim environments to maintain anonymity inside critical infrastructure IT networks.
CISA linked the likelihood of Chinese cyber activity to the state of the bilateral relationship and published associated TTPs and mitigations for critical infrastructure owners.