SecurityThe Hacker Newsabout 3 hours ago
Fire Ant Hijacks Cisco Routers, Steals Credentials
1 min read
China-linked Fire Ant compromised Cisco IOS XR routers, TACACS servers, and Linux hosts, capturing traffic and stealing credentials. The actor suppressed logging and telemetry, deployed new tools TacTap and BridgeAgent, and used rootkits Medusa and REPTILE. Sygnia investigated the intrusion.
Level
Hype check
Tap to vote and see what everyone thinks.
