China flags 10 overseas sites in cyberattack alert

In a significant move to bolster national cybersecurity, China’s National Cybersecurity Notification Center unveiled a list of 10 malicious websites and Internet Protocol (IP) addresses on Monday, November 11, 2025. These sites, linked to overseas hacker groups, have been actively used to orchestrate cyberattacks targeting China and other nations. The center emphasized that the identified domains and IPs are directly associated with Trojan programs and their command-and-control servers, facilitating botnet operations and backdoor exploitations. Such activities pose a severe threat to networked institutions and internet users across China. The flagged addresses span multiple countries, including the United States, Germany, the Netherlands, Latvia, Turkiye, Iran, the Republic of Korea, and Brazil. This alert underscores China’s proactive stance in combating global cyber threats and safeguarding its digital infrastructure. The announcement was made via the center’s official social media channels, urging heightened vigilance among stakeholders.