conv.

← The whole story
Security
Cisco SD-WAN zero-day linked to Volt Typhoon's covert network

Cisco Talos and Lumen publish research linking UAT-11473 to Volt Typhoon's Silent Train

2 Oct 29 · 13d ago · 2 articles · 2 sources · development 2 of 2

Cisco Talos reported that UAT-11473, which deployed KeyDrift malware on SD-WAN controllers, has infrastructure that "overlaps considerably" with Volt Typhoon's Silent Train network. On the same day, Lumen's Black Lotus Labs published research detailing Silent Train's use in at least four confirmed zero-day campaigns targeting Versa Director, N-able N-central, Cisco Catalyst SD-WAN, and VeloCloud Orchestrator, plus a likely campaign against Quest KACE.

Cisco Talos and Lumen publish research linking UAT-11473 to Volt Typhoon's Silent Train
securityweek.com

“Talos assessed with high confidence that UAT-11473's infrastructure "overlaps considerably with Volt Typhoon's 'Silent Train' covert access network."”

Cisco Talos

Cisco Talos Security researcherLumen Black Lotus Labs Security researcherVolt Typhoon Chinese APTUAT-11473 Sophisticated APT (Talos designation)

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 2 pieces in 4h at Oct 29, 3 AM; 3 pieces over 14 days (2 articles · 1 post) Oct 29, 3 AM — 2 pieces · 2 articles — Google News 1, Newswires 1Oct 29, 7 AM — quietOct 29, 11 AM — 1 piece · 1 post — Mastodon 1Oct 29, 3 PM — quietOct 29, 7 PM — quietOct 29, 11 PM — quietOct 30, 3 AM — quietOct 30, 7 AM — quietOct 30, 11 AM — quietOct 30, 3 PM — quietOct 30, 7 PM — quietOct 30, 11 PM — quietOct 31, 3 AM — quietOct 31, 7 AM — quietOct 31, 11 AM — quietOct 31, 3 PM — quietOct 31, 7 PM — quietOct 31, 11 PM — quietNov 1, 2 AM — quietNov 1, 6 AM — quietNov 1, 10 AM — quietNov 1, 2 PM — quietNov 1, 6 PM — quietNov 1, 10 PM — quietNov 2, 2 AM — quietNov 2, 6 AM — quietNov 2, 10 AM — quietNov 2, 2 PM — quietNov 2, 6 PM — quietNov 2, 10 PM — quietNov 3, 2 AM — quietNov 3, 6 AM — quietNov 3, 10 AM — quietNov 3, 2 PM — quietNov 3, 6 PM — quietNov 3, 10 PM — quietNov 4, 2 AM — quietNov 4, 6 AM — quietNov 4, 10 AM — quietNov 4, 2 PM — quietNov 4, 6 PM — quietNov 4, 10 PM — quietNov 5, 2 AM — quietNov 5, 6 AM — quietNov 5, 10 AM — quietNov 5, 2 PM — quietNov 5, 6 PM — quietNov 5, 10 PM — quietNov 6, 2 AM — quietNov 6, 6 AM — quietNov 6, 10 AM — quietNov 6, 2 PM — quietNov 6, 6 PM — quietNov 6, 10 PM — quietNov 7, 2 AM — quietNov 7, 6 AM — quietNov 7, 10 AM — quietNov 7, 2 PM — quietNov 7, 6 PM — quietNov 7, 10 PM — quietNov 8, 2 AM — quietNov 8, 6 AM — quietNov 8, 10 AM — quietNov 8, 2 PM — quietNov 8, 6 PM — quietNov 8, 10 PM — quietNov 9, 2 AM — quietNov 9, 6 AM — quietNov 9, 10 AM — quietNov 9, 2 PM — quietNov 9, 6 PM — quietNov 9, 10 PM — quietYesterday, 2 AM — quietYesterday, 6 AM — quietYesterday, 10 AM — quietYesterday, 2 PM — quietYesterday, 6 PM — quietYesterday, 10 PM — quietToday, 2 AM — quietToday, 6 AM — quietToday, 10 AM — quietToday, 2 PM — quietToday, 6 PM — quietToday, 10 PM — quiet 1–2
1–2Cisco Talos and Lumen publish research…
Oct 30Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9yesterdaynow · 11:36 PM ET

What was reported 1 claim about this development

  1. 1 outlet Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network

    first by SecurityWeek, 13d ago

All 2 developments of Cisco SD-WAN zero-day linked to Volt Typhoon's covert… →

NewswiresMastodonGoogle News