Microsoft Detects “Volt Typhoon” Hackers Targeting Critical Infrastructure in Guam and US

According to Microsoft, the hackers, also known as Volt Typhoon, have been active since mid-2021. They focus primarily on critical infrastructure on the island of Guam, a critical US military outpost in the Pacific, as well as elsewhere in the US. Volt Typhoon would aim to “carry out espionage and maintain access for as long as possible without being detected,” the US company said in a statement.

Microsoft suspects that Volt Typhoon wants to be able to disrupt critical communication infrastructure between the US and Asia in future crises, but cannot estimate whether the hackers can do that now. The company says that the beleaguered American organizations are active in the maritime sector, government and information technology, among others.

Microsoft’s findings are endorsed in a statement by US, Australian, Canadian, New Zealand and UK authorities, although Canada’s cybersecurity agency said there have been no reports of Volt Typhoon hacking so far in that country. The US national security agency NSA works with foreign allies and the FBI to detect breaches.

China has not yet responded to the allegations.