Chinese cyber espionage groups, including Volt Typhoon, increasingly use ORB networks for evasion and complicating attribution.
Chinese cyber espionage groups, including Volt Typhoon, increasingly use ORB networks (Operational Relay Boxes) to evade detection and complicate attribution. These networks, often running off stolen or leased proxies or via home/small office routers, are made up of virtual private servers and compromised IoT devices. ORBs are a major innovation in Chinese cyber espionage, constantly reconfiguring and making it difficult for defenders to track attacks.
May 22, 2024
4 Articles