Voltzite

Voltzite, also known as Volt Typhoon, Bronze Silhouette, Vanguard Panda, and UNC3236, is a threat actor that has been linked to the People's Republic of China. The group targets operational technology (OT) networks across multiple critical infrastructure sectors, including electric power generation, emergency services, water treatment, telecommunications, and the defense industrial base. In recent reports, Voltzite has shown an increased interest in electric transmission and distribution organizations, particularly in African nations, mirroring similar activities within the United States. This threat actor forms part of the three new threat groups identified by IT security specialist Dragos, which have contributed to a nearly 50% increase in reported cyber incidents among industrial organizations. Between July and August 2023, Dragos observed Voltzite conducting extensive reconnaissance and potential exploitation attempts against an African electric network operator's external network perimeter. Further possible exploitation attempts were noted in November against an African electric transmission, distribution, and retail entity. Voltzite's activities demonstrate a consistent focus on the electric sector and an interest in Geographical Information System (GIS) data, aligning with their operations within the United States. However, Dragos refrains from commenting on the group's intent, stating that only the adversary truly knows their objectives. Despite its evident disruptive intentions, Voltzite has yet to demonstrate successful actions or capabilities that could disrupt, degrade, or destroy Industrial Control Systems (ICS) or OT assets or operations. Nevertheless, the emerging threat posed by Voltzite, along with its links to Volt Typhoon, necessitates immediate action on cyber defense from utilities and other targeted sectors. With ransomware continuing to be the most reported cyber threat among industrial organizations, it is crucial for these entities to strengthen their cybersecurity measures to mitigate potential risks.