You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
covert networks
About this tag
Covert networks refer to stealthy communication channels and infrastructure used by threat actors to control compromised devices, exfiltrate data, and evade detection. On WindowsForum, discussions cover the NCSC advisory on China-nexus covert networks, which highlights a shift from bespoke attacker-owned infrastructure to large-scale routing through compromised devices. Defenders are advised that traditional IP blocklists and one-time takedowns are insufficient against these persistent, adaptive networks. Topics include detection strategies, network segmentation, and monitoring for anomalous traffic patterns. The tag is relevant for IT security professionals and Windows administrators seeking to understand and defend against advanced persistent threats that leverage covert network architectures.
Over the past few years, China-nexus cyber actors have made a quiet but consequential shift: instead of relying mainly on bespoke infrastructure they own or lease, they are increasingly routing operations through vast networks of compromised devices spread across the internet. The new NCSC-led...