China-Backed Groups are Using Massive Botnets in Espionage, Intrusion Campaigns

CISA and partner agencies warn that China-nexus APTs are increasingly leveraging large botnets of compromised SOHO, IoT, and edge devices ("covert networks" such as Raptor Train and KV Botnet) to conduct reconnaissance, deliver malware, exfiltrate data, and stage deniable attacks against critical infrastructure and enterprise environments; the advisory calls out end-of-life routers, cameras, NAS, and other IoT as primary targets and urges improved device security and best practices.