This week, Jen Easterly, CISA director blogged that China’s “sophisticated and well-resourced cyber program represents the most serious and significant cyber threat to our nation, and in particular, US critical infrastructure.”
Easterly, who may be replaced soon by the new Trump administration amid complaints by Republicans that her agency has been more focused on countering disinformation than protecting critical infrastructure, wrote that over the past two years, the CISA and industry partners have been “laser focused on deterring China’s cyber aggression, working with critical infrastructure entities across the nation to identify and evict Chinese cyber actors, whether they are focused on espionage — such as the recent ‘Salt Typhoon’ campaign against US telcos — or disruption — the ‘Volt Typhoon’ campaign designed to disrupt or destroy our most sensitive critical infrastructure.”
She added, “while PRC cyber actors have attempted to evade detection by using living off the land methods — hiding their activity within the native processes of computer operating systems — our world class team of threat hunters have detected them and assisted critical infrastructure partners in evicting them.”