China-linked Fire Ant targets Cisco IOS XR routers, TACACS servers and Linux hosts
The attackers used compromised Cisco routers as network monitoring points, allowing them to capture traffic, collect credentials and hide malicious activity.
3 min read