China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
Fire Ant compromises Cisco IOS XR routers and TACACS servers to capture traffic, harvest credentials, and suppress defensive telemetry.
More info