Hunt Intelligence researchers have found more than 18,000 active C2 servers across 48 Chinese internet infrastructure providers.

China Unicom alone hosts nearly half of all observed C2 servers.