Skip to content
Threat Feed
Subscribe

Actor

Bronze Silhouette

1 brief RSS
Also known as: Volt Typhoon Vanguard Panda Insidious Taurus
medium threat

System Disk And Volume Reconnaissance Via Wmic.EXE

Threat actor Volt Typhoon is observed using the built-in Windows Management Instrumentation Command-line (WMIC.EXE) utility to perform system and volume discovery, gathering critical system information that can facilitate further network exploitation and data exfiltration.

Volt Typhoon +3 discovery reconnaissance wmic living-off-the-land windows
1r 2t