
highThreat Actors
Volt Typhoon Exploits Disrupted 'Silent Train' Covert Network in Zero-Day Campaigns
Volt Typhoon, a China-nexus cyber espionage group, has been attributed to a covert access network dubbed Silent Train. Identified in late 2023, the network uses rotating chains of compromised SOHO, IoT, and enterprise infrastructure for zero-day exploitation and strategic access. Lumen Technologies Black Lotus Labs reported the disruption of the network in October 2026, though residual risk remains from previously compromised devices.
The Hacker News1 min read