If you read the CVE description linked you'll notice some details focused on the actual specific product, I have a hard time believing random hackers trying to build a botnet would search out critical infrastructure and burn expensive 0-days for small amounts of compute.
I may be wrong, but I think the development of an "industry" would depend on the foundation of related education and its popularity in the population. Like if football is not taught in the school and people generally don't play it in a country, it's unlikely to have a team to win in olympics even if the government wants it.
https://nattothoughts.substack.com/p/who-is-volt-typhoon-a-s...
> Black Lotus Labs said it assessed with “medium” confidence that Volt Typhoon was responsible for the compromises, noting the intrusions bear the hallmarks of the Chinese state-sponsored espionage group — including zero-day attacks targeting IT infrastructure providers, and Java-based backdoors that run in memory only.
Who is Natto Thoughts and why should I care? Substack opinions are cheap.
Analogy: "was this murder committed by Jack the Ripper?" and "who was Jack the Ripper?" are separate questions.
> Who the heck is Natto Thoughts and why should I care?
You can check out their about page:
https://www.cisa.gov/news-events/cybersecurity-advisories/aa...
Based on my observation of fellow Chinese software engineers' average knowledge and skills about cyber security, as well as the absolute absent of security considerations of most "SOHO network devices" in China, I would rather apply Hanlon's razor and say that it's not the Chinese attackers, but it's Chinese botnet.
As you may already know, Chinese users and software engineers generally does not care about personal privacy and hence also cyber security, so the entire industry is rather undeveloped.