CISA shares critical infrastructure defense tips against Chinese hackers

CISA, the NSA, the FBI and international partners warned that the Chinese APT Volt Typhoon (aka Bronze Silhouette) has been breaching and maintaining persistent access to U.S. critical infrastructure since at least mid-2021, leveraging a SOHO router botnet (KV-botnet) and techniques aimed at obtaining OT access; agencies provided detection and mitigation guidance and urged hardening of SOHO devices and logging to detect living-off-the-land activity.