Meet the Chinese ‘Typhoon’ hackers preparing for war

**Executive summary:** The report details China‑backed hacking groups—Volt, Flax, Salt, and Silk Typhoon—conducting sustained intrusions into U.S. critical infrastructure, telecom networks, and government systems; these actors used compromised routers, large botnets, stolen keys/credentials, and living‑off‑the‑land techniques to collect intelligence and pre‑position for potential disruptive attacks, prompting U.S. disruptions of botnets and sanctions against linked entities.