Hackers Abuse Compromised Routers to Hide China-Linked Cyber Operations

A UK NCSC advisory warns that China-linked threat actors are silently compromising routers and edge/IoT devices worldwide to create constantly changing covert relay networks that anonymise cyber-espionage activity across the full attack lifecycle; the advisory highlights "IOC extinction," broad operational impact, and recommends baseline edge-traffic monitoring, MFA/zero-trust controls, dynamic threat feeds, and targeted threat hunting.