TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

NCSC UK

Defending against China-nexus covert networks of compromised devices

2026-04-23 · Read original ↗

ATT&CK techniques detected

2 predictions
T1190Exploit Public-Facing Application
86%
“the chinese company, integrity technology group. this company was also assessed by the fbi to be responsible for the computer intrusion activities attributed to china - based hackers known as flax typhoon. “ botnet operations represent a significant threat to the uk by exploiting…”
T1090Proxy
31%
“network and what they are being used for. it also includes protective advice for organisations being targeted by cyber activity using a covert network as an access vector. covert networks covert networks are used to connect across the internet in a low - cost, low - risk, deniabl…”

Summary

Explaining the widespread shift in tactics, techniques and procedures (TTPs) towards networks of compromised infrastructure, and how to defend against it