A dozen allied agencies say China is building covert hacker networks out of everyday routers

A dozen allied agencies warn that China-nexus cyber actors are using large-scale covert networks composed of compromised SOHO routers and IoT devices to conduct cyberattacks. These networks enable low-risk, deniable operations for reconnaissance, malware delivery, and espionage, with examples like the Raptor Train botnet. The advisory highlights a strategic shift in tactics and urges organizations to adopt defensive measures.