KeyDrift Malware Hijacks Cisco SD-WAN Processes to Intercept Traffic and Extract IPsec Keys

Cisco Talos has uncovered KeyDrift, a custom malware framework that hides inside Cisco SD-WAN controller processes to intercept decrypted control traffic and collect sensitive encryption keys. Researchers linked the activity to UAT-11473, a sophisticated advanced persistent threat actor targeting strategically important organizations. The... Weiterlesen: KeyDrift Malware Hijacks Cisco SD-WAN Processes to Intercept Traffic …