China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System (TACACS) servers, and Linux management hosts used to route, authenticate, and manage high-value networks.

Sygnia, the incident response firm that investigated the intrusion, said the actor

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots A critical flaw in Google’s Dialogflow CX could have let an attacker with edit rights on one Code

OpenAI Jalapeño: Better than Nvidia Blackwell

OpenAI Jalapeño: Better than Nvidia Blackwell Source: Hacker News