The group's tactics, techniques, and procedures (TTPs) are sophisticated, and they have been able to evade detection by using zero-day exploits and other advanced techniques. Volt Typhoon has also been known to use social engineering tactics to gain access to networks and devices.

In January, the U.S. government disrupted a botnet dubbed "Volt Typhoon," which was used by the group to hide its malicious activity aimed at targeting U.S. critical infrastructure. The disruption was successful in removing the malware from the hijacked routers, but it's likely that Volt Typhoon will continue to evolve and adapt to evade detection.