GoKawiilLumen's Black Lotus Labs exposes Volt Typhoon's 'Silent Train' relay framework
Black Lotus Labs, Lumen's threat research arm, says it has spent three years tracking a rotating-relay framework it calls Silent Train, used by Chinese state-linked group Volt Typhoon. The group reportedly exploited at least four zero-day vulnerabilities in edge and management infrastructure, routing attacks through overseas VPS servers and chains of hijacked devices like routers to mask their origin before cleaning up after each operation.