China-Linked Hackers Turn Cisco Routers Into Covert Network Gateways

Compromising a server can expose one machine. Compromising the right router can give attackers visibility into an entire network. Security firm Sygnia says the China-linked Fire Ant threat actor compromised Cisco IOS XR routers and used its privileged access to monitor network traffic and establish covert connections into surrounding environments....