The U.S. government has uncovered a Chinese hacking campaign targeting Guam's critical infrastructure, according to Bloomberg. Guam is a key U.S. military outpost, a foothold on one of the remote Mariana Islands in the Pacific. China's operation is reportedly called Volt Typhoon and it is meant to disrupt military and civilian operations in the event of conflict over Taiwan. The purported campaign focuses on infiltrating operational systems to prepare for potential sabotage, creating widespread vulnerabilities in Guam.
Volt Typhoon infiltrates systems by mimicking legitimate users and unlike attacks that exfiltrate data, this program seeks control over critical infrastructure such as water systems, power grids, and communication networks. Volt Typhoon is said to operate so discreetly that detection relies on identifying anomalies, like irregular login patterns. This is where it got detected, as the Guam Power Authority (GPA), the only provider of electricity on the island, became a point of interest when U.S. investigators approached its cybersecurity head — Melvyn Kwek — to assess unusual network activity back in 2022.
