Cyber Threat Report: 'VOLTZITE Espionage Operations Targeting U.S. Critical Systems'

This report details activity related to the VOLTZITE intrusion set as observed by Dragos. The report identifies sectors and geographies targeted by VOLTZITE as well as describing the tactics, techniques and procedures (TTPs) Dragos associates with the group. TTPs reported include the use of living-off-the-land techniques, utilising compromised SOHO routers and leased VPS infrastructure and the use of credential theft for lateral movement.