Compromised everyday devices power Chinese cyber espionage operations

### Executive summary The NCSC warns that China-linked cyber actors increasingly use large-scale covert networks built from compromised SOHO routers, IoT and edge devices to hide malicious activity; the advisory provides guidance for defenders and cites a botnet controlled by Integrity Technology Group used by the state-linked Flax Typhoon that affected more than 65,000 devices across six EU states.