ScienceBleepingComputerabout 2 hours ago
Fire Ant turns Cisco routers into spying platforms
1 min read
Fire Ant compromised Cisco IOS XR routers with custom malware, creating hidden GRE tunnels to capture traffic and upload PCAP files to external FTP servers. The attackers used a concealed tunnel to reach a legacy Linux server for staging, probing high-value networks. Sygnia also found a new backdoor, BridgeAgent, disguised as a Zabbix agent.
Level
Hype check
Tap to vote and see what everyone thinks.
