Cybersecurity

Chinese Hackers Breach US, India Internet Firms, Lumen Says

  • Volt Typhoon malware has breached four US firms, Lumen finds
  • US has accused China-linked group of targeting infrastructure

The revelation will add to concerns over the susceptibility of US critical infrastructure to cyberattacks. 

Photographer: Christian Petersen/Getty Images
Lock
This article is for subscribers only.

The state-sponsored Chinese hacking campaign known as Volt Typhoon is exploiting a bug in a California-based startup to hack American and Indian internet companies, according to security researchers.

Volt Typhoon has breached four US firms, including internet service providers, and another in India through a vulnerability in a Versa Networks server product, according to Lumen Technologies Inc.’s unit Black Lotus Labs. Their assessment, much of which was published in a blog post on Tuesday, found with “moderate confidence” that Volt Typhoon was behind the breaches of unpatched Versa systems and said exploitation was likely ongoing.