China Infiltrates US Critical Infrastructure in Ramp-up to Conflict

US officials and industry sources warn that China-linked advanced persistent threats—especially the group known as Volt Typhoon—are shifting from espionage to preparing disruptive or destructive cyber operations against US critical infrastructure. Attackers have been observed compromising SOHO routers to mask operations and relying on living-off-the-land techniques, making detection harder; U.S. government and private sector efforts have reportedly disrupted some activity.