Volt Typhoon used Silent Train network to conceal zero-day attacks

The China-linked hacking group used rotating chains of compromised devices to conceal access to high-value systems. Lumen's Black Lotus Labs linked the Silent Train network to at least four zero-days, according to Security Affairs. CyberScoop reports that the framework helped the group infiltrate hundreds of critical infrastructure networks.

• The Hacker News reports that the covert access network has been disrupted.

Covered by 6 publishers within 21 hours of the first report.

• BleepingComputer: Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Reporting6

CS CyberScoop Researchers uncover Volt Typhoon’s covert, ephemeral network · Matt Kapko 12:00 PM

BC BleepingComputer Volt Typhoon hides zero-day attacks using 'Silent Train' framework · Bill Toulas 12:00 PM

THN The Hacker News Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns · info@thehackernews.com (The Hacker News) 2:08 PM

SW SecurityWeek Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network · Eduard Kovacs 6:29 AM

SAF Security Affairs Volt Typhoon Used Silent Train to Hide Zero-Day Attacks · Pierluigi Paganini 6:34 AM

CSN Cyber Security News Chinese Hackers Use Secret Silent Train Network to Exploit Zero-Days Against U.S. Government and Defense · Tushar Subhra Dutta 8:48 AM

Related

CS Prolific Chinese espionage group exploits BeyondTrust zero-day October 15

THN China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility October 29

CSN CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials October 14

CSN Cisco patches exploited CVE-2026-76418 in ASA and FTD firewalls October 29

Topics Zero-day vulnerabilities