Snap: Attackers Infect Cisco Routers with "SYNful Knock" Backdoor to Steal Data | Hacked posted by MePLUR
  parent
  • idlethreat
    +4

    The implant consists of a modified Cisco IOS image that allows the attacker to load different functional modules from the anonymity of the internet.

    So, this would be considered a local attack. Someone with physical access to the equipment itself is installing a revised version of the IOS firmware on affected devices to which they are able to gain access. It is not a bug. It is a revised firmware which allows access.

    8 years ago
    Reply
    Save
    1 Replies
    • JTtheGhost
      +1

      Helps to reinforce the fact that physical access control Is just as important as security on the configs :/

      8 years ago
      Reply
      Save