Earlier this year, a closed-door war game in Times Square simulated a terrifying scenario: a coordinated cyberattack by a Chinese state-sponsored group, **Volt Typhoon**, that simultaneously incapacitates 5,000 US water utilities. **WIRED** Senior Correspondent **Andy Greenberg** gained rare access to this simulation, revealing disturbing conclusions about the nation's preparedness. ### The Specter of Volt Typhoon **Volt Typhoon** is not an ordinary espionage group. For the past three years, this Chinese state-sponsored entity has been strategically embedding malware within critical US infrastructure, a process cybersecurity experts call "pre-positioning." This groundwork could enable them to disrupt essential services like power, telecommunications, and, most alarmingly, the water supply. Initially, **Volt Typhoon**'s targets appeared to be electric grids and telecommunication networks in the continental US and Guam, likely aimed at disrupting US military facilities in the event of a conflict, such as a potential Chinese invasion of **Taiwan**. However, the scope of their infiltration has proven far wider. Investigations revealed that **Volt Typhoon** has also breached civilian critical infrastructure, including water and electric utilities in towns as small as Littleton, Massachusetts. As **Greenberg** highlighted, the chief information security officer of Littleton's utility had no idea why his town of 10,000 would be a target. ### Digital Bombs in Our Infrastructure This widespread infiltration suggests a more sinister motive: the ability to inflict widespread societal chaos across the US. Experts theorize this could serve as a diversionary tactic during a major international crisis. **Rob Joyce**, former **NSA** Director of Cybersecurity, starkly described **Volt Typhoon**'s activities as "laying what he describes as digital bombs strapped to our infrastructure." ### The War Game: Dungeons & Dragons for National Security The Times Square war game, dubbed "Dungeons & Dragons for a national security nightmare" by **WIRED** Executive Editor **Brian Barrett**, involved approximately 30 insurance executives. Under a strict countdown clock, participants grappled with the fallout of a massive water utility shutdown, simulating burst water mains, hospital evacuations, and even insulin shortages. **Greenberg**’s insights from the simulation underscore that the most terrifying aspect might not be the hack itself, but rather the ensuing confusion and lack of clear authority when essential services grind to a halt. This exercise served as a stark reminder of the complex, multi-layered challenges posed by sophisticated state-sponsored cyber threats to critical infrastructure.