Microsoft reports that a new threat actor, Storm-0227, has targeted critical infrastructure in the United States.Storm-0227 is a Chinese state-sponsored advanced persistent threat (APT) group linked to Silk Typhoon.The group utilizes spear phishing and exploits software vulnerabilities to gain unauthorized access.Once accessed, Storm-0227 deploys malware to obtain login credentials and steal sensitive documents for cyber-espionage.