Chinese Hackers Exploit Software Flaw Volt Typhoon Targets US Indian Firms

— the knowledge tips C HINTAN CREDIT-GOOGLE

Chinese hackers from Volt Typhoon exploit a flaw in Versa Networks' software to target US and Indian companies.

[{"selector":"#anim-f52ef136-cac7-419d-84c5-b4c73f9eb363","keyframes":{"transform":["translate3d(106.59342%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a9ecf83a-d798-41d6-adf9-7daf9d5f602e","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-4bd9cd65-88bd-40a4-a85f-79c1560c6eb1","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-b131d94d-1a8a-47a5-8571-20d44bd59f44 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Volt Typhoon has breached four US companies and one Indian firm using this vulnerability, as reported by Black Lotus Labs.

[{"selector":"#anim-ae5b2a23-f33b-40e1-bb4a-9be063b52976","keyframes":{"transform":["translate3d(106.59342%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-f5da0461-70b9-47f1-98c3-bce0eedc791d","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b56e3802-32ff-4373-b2ce-f108781eb3ff","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-11cf1aa1-e2bd-4b77-a800-f952abf084a4 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}]

The flaw, in software managing network configurations, was fixed by Versa Networks in June 2023.

[{"selector":"#anim-fd6eea02-eafe-4fcc-9894-af2d85662cea","keyframes":{"transform":["translate3d(106.59342%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-2e982961-9dbb-415d-add4-1f94971e090c","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-43e634b9-1a72-4198-b35c-db409a07415e","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-bac8a878-1418-49a8-9488-fd3a8df211fb [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Many companies failed to apply the patch, leaving them vulnerable to ongoing attacks by Volt Typhoon.

[{"selector":"#anim-1de95cec-073a-4bf1-b91a-bc276866ebdb","keyframes":{"transform":["translate3d(106.59342%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-9ca74955-8e78-4e2f-9bde-9574f7f438cb","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-3078caa0-c9c7-4182-b531-5d541518f09f","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-25a2d08f-04c9-4ba2-8ece-db230ea34d17 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}]

Volt Typhoon is suspected of being a state-sponsored group, targeting critical infrastructure in the US.

[{"selector":"#anim-8f31e3aa-04ad-420f-bd08-4dfdea298071","keyframes":{"transform":["translate3d(106.59342%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-bbf2ee2f-b175-49f3-8143-690b583646d3","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-294e57c2-aeac-4c38-b54b-e8d0a021e80d","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-20094968-4b51-415c-8b98-fc6a6e61c5dd [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

The Chinese government denies involvement, calling Volt Typhoon a criminal group named “Dark Power.”

[{"selector":"#anim-c2db80ef-9460-43d9-9ddf-afb4ecd36652","keyframes":{"transform":["translate3d(106.59342%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-07fec6b4-122d-44d8-bea9-46272e388ab9","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6a1c4100-df75-4502-b4b9-e4d3281eabae","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-a12b999f-0da6-4160-86c7-93d837e17c4e [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}]

Versa has updated its systems for better security, issuing an emergency fix and alerting customers in July 2023.

[{"selector":"#anim-fc619b3b-04b5-4b5c-a9ed-755e9db2e804","keyframes":{"transform":["translate3d(106.59342%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-e13d38c8-abfd-46c5-85bb-82cd0b89400e","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-176994ec-7f33-4c1e-a51f-f0edc6eeb651","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-d27bbefe-1916-4137-afea-b4058ce0b7c0 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

The vulnerability is rated "high" severity; CISA has mandated federal agencies to address it or stop using Versa products.

[{"selector":"#anim-74b9bb14-67e9-4331-b1b2-51caa2b23853","keyframes":{"transform":["translate3d(106.59342%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-ae8faa00-8087-41d2-93fc-5fb452f27a28","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-f4c57000-0797-4b00-93bc-7a38bee7fc89","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-9ba731af-f92c-4802-8298-537836f33d4f [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}]

Aly Goni Reveals Breakup Reason with Natasa Stankovic She Wanted Space

[{"selector":"#anim-4c8eead5-3347-4ac8-a307-484e7b66ef83","keyframes":{"transform":["translate3d(106.59342%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-1bd12f8c-1e83-421d-8d74-d39a03fd202c","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-0f1fd1f0-4b78-4f92-832a-853d1f0d9dda","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-33282d24-f9f7-4cb8-b531-3e347f52c501 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] Learn more