-1 1 2
Published 8 years ago by MePLUR with 2 Comments
Additional Contributions:

Join the Discussion

  • Auto Tier
  • All
  • 1
  • 2
  • 3
Post Comment
  • idlethreat
    +4

    The implant consists of a modified Cisco IOS image that allows the attacker to load different functional modules from the anonymity of the internet.

    So, this would be considered a local attack. Someone with physical access to the equipment itself is installing a revised version of the IOS firmware on affected devices to which they are able to gain access. It is not a bug. It is a revised firmware which allows access.

    • JTtheGhost
      +1

      Helps to reinforce the fact that physical access control Is just as important as security on the configs :/

Here are some other snaps you may like...