China is engaging in sustained cyber operations against US critical infrastructure. The NJCCIC’s latest threat analysis report analyzes Chinese state-sponsored cyber campaigns targeting key sectors with the intent to disrupt vital services during a geopolitical conflict. Advanced persistent threat (APT) groups like Volt Typhoon, Salt Typhoon, and APT 41 are actively establishing persistent access within the communications, energy, water and wastewater systems, and transportation systems sectors. The NJCCIC has assessed that the frequency and severity of these attacks will continue to increase in response to escalating tensions between China and the United States. This report includes:

• An overview of China’s strategic motivations.
• Risk assessments evaluating the likelihood and impact of a widespread attack against each sector.
• An outline of the tactics, techniques, and procedures (TTPs) used in these operations.
• Examples of real-world cyber intrusions and campaigns demonstrating pre-positioning activity.
• Sector-specific defensive guidance tailored for infrastructure operators and policymakers.

Read the full report on our website.