New reports reveal that the infamous Chinese hacking group Volt Typhoon is allegedly targeting Guam’s critical infrastructure, specifically aiming at disrupting the services in the region. The Guam Power Authority (GPA) is reportedly under attack, raising concerns about potential havoc. Guam, a small island with a population of under 200,000, is also home to a significant US military base, occupying over a third of the island and holding strategic importance, especially considering its proximity to China.

Recent findings have indicated subtle infiltrations by hackers, with irregular login patterns as the only detected anomalies, pointing towards Volt Typhoon as the main suspect. The GPA, the sole power utility on the island with the US Navy as its major customer, making up 20% of the total power consumption in 2023, faces challenges in investigating and addressing these intrusions, given that most critical infrastructure is managed by private companies.

Despite these revelations, not everyone on the island is convinced of the threat posed by Volt Typhoon. Chief Technical Officer of numerous government agencies on Guam, Frank Lujan, denies any evidence of compromise, labeling it as the ‘illusion of Volt Typhoon’. Director Jen Easterly of the Cybersecurity and Infrastructure Security Agency (CISA) warned Congress in early 2024 about Chinese hackers evolving their tactics to conduct destructive attacks on US infrastructure, potentially endangering American lives by disrupting telecommunications, pipelines, water facilities, and transportation simultaneously.

In response to these allegations, China has vehemently refuted the claims, even accusing Volt Typhoon of being a CIA asset. This recent campaign is not the first time Volt Typhoon has been exposed, with reports earlier in 2024 revealing their infiltration of US critical infrastructure networks over a span of five years in a significant cyber espionage operation.