China Cybersecurity routers News Threat group is installing a backdoor in compromised Cisco router firmware. NSA says get better kit "The modified firmware uses a built-in SSH backdoor, allowing BlackTech actors to maintain access to the compromised router without their connections being logged" Edward Targett September 28, 2023
Cybersecurity Check Point China firmware routers Chinese APT taps trojanised routers for mystery purposes Horse Shell has a "penchant for complex structures" (and simple errors) The Stack May 16, 2023
Cybersecurity Featured Cisco routers switchgear Russian APT hacked Cisco routers to hit US government Cisco "deeply concerned" at attacks on "routers and firewalls globally" The Stack April 18, 2023
Cybersecurity China Kaspersky Kaspersky says Chinese APT demonstrating "seemingly impossible network behaviors" Threat group's infrastructure "nothing short of extraordinary" Edward Targett June 02, 2022
Cybersecurity zero days The Year of the Zero Day: A record 6 a month exploited in 2021 Vendor telemetry is improving... The Stack April 23, 2022
Cybersecurity Broadcom China CISA Daxin malware rootkit Symantec Previously undocumented rootkit being deployed by Chinese APT Daxin malware has some really clever C2 techniques to exfiltrate intelligence The Stack March 02, 2022
Cybersecurity firmware Kaspersky rootkit UEFI Unique new UEFI firmware attack dubbed "MoonBounce" spotted by Kaspersky, raises questions UEFI rootkits survive OS re-installation, hard disk replacement. The Stack January 20, 2022
Featured China mĂcrosoft Patch Tuesday "MysterySnail" 0day in Win32k used to hit IT, defence firms Kaspersky, NSA report critical vulns, one used in a major campaign. The Stack October 13, 2021