10-nation alert on China-linked botnet threat

Cybersecurity agencies from the US, UK, Australia, Canada, Germany, Japan, Netherlands, New Zealand, Spain, and Sweden have issued a joint advisory detailing a systematic campaign by China-nexus threat actors. The alert states that multiple APT groups, including Volt Typhoon and Flax Typhoon, have exploited networks of over 200,000 infected routers, IoT devices, and firewalls to conceal intrusion activity and preposition for potential destructive attacks on critical infrastructure. The advisory recommends defensive measures such as edge device traffic mapping, zero-trust controls, and multi-factor authentication. It warns that new botnets are being deployed as fast as law enforcement can disrupt existing ones, creating a dynamic threat landscape that requires proactive hunting and anomaly detection.