Hackers Use New Malware To Target Firewall Appliances

Share post:

Top security agencies have warned of a new malware that Russian military hackers use to exploit firewalls, compromise networks and infect with malware.

According to the NCSC, CISA, FBI, and NSA, the malware known as “Cyclops Blink” is linked to Sandworm, an offensive hacking operation previously linked to Russia’s GRU.

Cyclops Blink has special capabilities, including the ability to gain persistent remote access to networks, upload and download files from infected machines, and the ability to add new features to malware that have already been executed.

Further clarification shows that Cyclops Blink persists at reboot and during the legitimate firmware update process.

It essentially targets WatchGuard devices that are reconfigured from the manufacturer’s default settings. This is used to open remote management interfaces to external access.

The NCSC recommended that organizations with devices infected with Cyclops Blink change their passwords. Other advice includes avoiding the exposure of management interfaces of network devices to the Internet and updating the devices.

For more information, read the original story in ZDNet.

SUBSCRIBE NOW

Related articles

CrowdStrike update causes global IT outages, fix is available

Some airlines, banks and government services around the world have been affected by a faulty software update for...

Charges dismissed in SolarWinds hacking case

A judge has dismissed most of the Securities and Exchange Commission's (SEC) fraud charges against SolarWinds related to...

Canadian is among foreign nationals pleading guilty to involvement with Lockbit ransomware

Two foreign nationals have pleaded guilty in the US District of New Jersey to their involvement in the...

FBI rapidly hacks into Trump shooter’s phone, raises privacy concerns

Just two days after the attempted assassination at a Trump rally, the FBI announced it had gained access...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways