The actor that Microsoft tracks as Volt Typhoon is a nation-state activity group based out of China. Volt Typhoon is known to primarily target the United States and the manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. Volt Typhoon focuses on espionage, data theft, and credential access.
Unmasking cyberthreat actors: Join Microsoft Security at Black Hat 2025 in August. Register now.
Nation State Actor
Volt Typhoon
Follow Microsoft Security