China has asserted that the Volt Typhoon gang, which Five Eyes nations accuse of being a Beijing-backed attacker that targets critical infrastructure, was in fact made up by the US intelligence community.

The nation's National Computer Virus Emergency Response Center, National Engineering Laboratory for Computer Virus Prevention Technology, and infosec vendor 360 Digital Security Group last week published a [1]report [PDF] on Vault Typhoon titled "<Lie to me/>: A secret Disinformation Campaign targeting US Congress and Taxpayers conducted by US Government agencies."

That title probably tells you plenty of what you need to know about the report, which goes on to claim that everything you have read about Volt Typhoon is the result of a misinformation campaign planned and executed by the NSA, the FBI, and the Departments of Justice, Defence, Homeland Security, and Energy.

[2]

Intelligence agencies from the other Five Eyes nations – Australia, Canada, New Zealand and the UK – chimed in.

[3]

[4]

Infosec providers were manipulated – presumably so they found fake evidence of Volt Typhoon's activities and then published material about it.

The object of the campaign was to secure re-authorization of the US's controversial [5]Section 702 warrantless surveillance regime.

[6]

The real victims, therefore, were the American people – as Section 702 allows warrantless surveillance of some communications sent by some citizens.

Such invasions of privacy are obviously offensive to China, where all citizens' communications are always subject to warrantless surveillance.

[7]China's Volt Typhoon spies broke into emergency network of 'large' US city

[8]China creates 'Information Support Force' to improve networked defence capabilities

[9]FBI: Give us warrantless Section 702 snooping powers – or China wins

[10]Cybercrime crew Magnet Goblin bursts onto the scene exploiting Ivanti holes

Read the rest if you want: it tells a tale of how FBI director Christopher "Wary" – a delicious mis-spelling of his actual surname, Wray – gave a [11]speech on April 18 in which he mentioned Volt Typhoon compromising critical infrastructure operators in the US.

Wray, for what it is worth, had earlier [12]labelled Section 702 as the US's best defense against Chinese hacking groups.

In China's telling, Wray's April speech was propaganda, the media fell for it, the body politic all decided Beijing is doing nasty things in cyberspace, and opposition to the extension of Section 702 melted away.

[13]

But the document's clever authors saw through the plot. Their take on the speech notes inconsistencies in Wray's remarks that offer clues to the vast conspiracy.

Sadly, the theory advanced in the document does not include lizard people, magic bullets, or fake Moon landings.

The document concludes with a warning to peaceful nations of the world that Section 702's existence, and extension, is evidence that the US is an aggressive global hegemon and an "Empire of Hacking" intent on keeping China down.

If the phrase "Empire of Hacking" seems familiar, it's because the authors of this piece have [14]already used it to describe US activities revealed in Wikileaks' 2017 [15]"Vault 7" infodump that revealed the CIA has developed tools to attack common operating systems.

As you would expect any intelligence agency to do in this digital age. ®

Get our [16]Tech Resources



[1] https://regmedia.co.uk/2024/07/19/china_volt_typhoon_inside_job_allegations.pdf

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zpo5OtvHvpsNYXWBs835OgAAAoo&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zpo5OtvHvpsNYXWBs835OgAAAoo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zpo5OtvHvpsNYXWBs835OgAAAoo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.theregister.com/2024/04/22/fisa_section_702_renewed/

[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zpo5OtvHvpsNYXWBs835OgAAAoo&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[7] https://www.theregister.com/2024/02/14/volt_typhoon_emergency_network/

[8] https://www.theregister.com/2024/04/22/china_information_support_force/

[9] https://www.theregister.com/2024/02/09/fbi_volt_typhoon_section_702/

[10] https://www.theregister.com/2024/03/08/magnet_goblin_ivanti/

[11] https://www.fbi.gov/news/speeches/director-wrays-remarks-at-the-vanderbilt-summit-on-modern-conflict-and-emerging-threats

[12] https://www.theregister.com/2024/02/09/fbi_volt_typhoon_section_702/

[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zpo5OtvHvpsNYXWBs835OgAAAoo&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[14] https://www.theregister.com/2023/05/05/china_labels_us_hacking_empire/

[15] https://www.theregister.com/2017/03/08/cia_exploit_list_in_full/

[16] https://whitepapers.theregister.com/