China's Typhoon ecosystem spans distinct PRC clusters — Volt for infrastructure pre-positioning, Salt for telecom surveillance, Silk for supply-chain pivoting — all sharing a playbook of credential abuse and living-off-the-land persistence on unpatched edge devices.