Chinese state-sponsored group Volt Typhoon (Bronze Silhouette) active since mid-2021, targeting US critical infrastructure sectors: communications, energy, transportation, water/wastewater. Uses ’living off the land’ (LOTL) techniques with built-in Windows tools (wmic, ntdsutil, netsh, PowerShell) to evade detection. Pre-positioned in IT networks for potential disruptive/destructive attacks in event of US-China conflict. CISA/NSA/FBI joint advisory Feb 7 2024. Active in Guam and continental US. Targets include telecoms, utilities, ports.