2021-06
Chinese Cyberespionage Group BRONZE SILHOUETTE Targets U.S. Government and Defense Organizations
https://www.secureworks.com/blog/chinese-cyberespionage-group-bronze-silhouette-targets-us-government-and-defense-organizations
2022-02
Routers Roasting on an Open Firewall: the KV-botnet Investigation
https://blog.lumen.com/routers-roasting-on-an-open-firewall-the-kv-botnet-investigation/
2023
Hunting Active Threats in Littleton’s Grid with the Dragos Platform and OT Watch
https://www.dragos.com/wp-content/uploads/2025/03/Dragos_Littleton_Electric_Water_CaseStudy.pdf
2023
UAT-5918 targets critical infrastructure entities in Taiwan
https://blog.talosintelligence.com/uat-5918-targets-critical-infra-in-taiwan/
2023-02
Redfly: Espionage Actors Continue to Target Critical Infrastructure
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/critical-infrastructure-attacks
2023-06
Analysis of CVE-2023-27997 and Clarifications on Volt Typhoon Campaign
https://www.fortinet.com/blog/psirt-blogs/analysis-of-cve-2023-27997-and-clarifications-on-volt-typhoon-campaign
2023-06
Business as Usual: Falcon Complete MDR Thwarts Novel VANGUARD PANDA (Volt Typhoon) Tradecraft
https://www.crowdstrike.com/blog/falcon-complete-thwarts-vanguard-panda-tradecraft/
2023-07
China's Volt Typhoon APT Burrows Deeper Into US Critical Infrastructure
https://www.darkreading.com/vulnerabilities-threats/china-s-volt-typhoon-apt-burrows-us-critical-infrastructure
2023-12
Volt Typhoon Compromises 30% of Cisco RV320/325 Devices in 37 Days
https://resources.securityscorecard.com/research/volt-typhoon
2023-12
KV-Botnet: Don’t call it a Comeback
https://blog.lumen.com/kv-botnet-dont-call-it-a-comeback/
2024-06
Taking the Crossroads: The Versa Director Zero-Day Exploitation
https://blog.lumen.com/taking-the-crossroads-the-versa-director-zero-day-exploitation/
2024-06
Chinese group accused of hacking Singtel in telecom attacks
https://www.straitstimes.com/business/chinese-group-accused-of-hacking-singtel-in-telecom-attacks
2025-08
UAT-7237 targets Taiwanese web hosting infrastructure
https://blog.talosintelligence.com/uat-7237-targets-web-hosting-infra/