UNC3236

A China state-sponsored cluster assessed to correspond to Volt Typhoon. It compromises routers and other edge devices, relies heavily on living-off-the-land techniques, and seeks persistent access to critical infrastructure for intelligence collection and potential disruption during a future crisis.