Skip to content
Threat Feed
Subscribe

Actor

IRON VIKING

1 brief RSS
high threat

Cyclops Blink Modular Linux Implant Targeting Network-Edge Appliances

The IRON VIKING threat group has deployed an updated modular Cyclops Blink variant on Cisco Firewall Management Center devices, using SysV persistence and masquerading as a kernel thread to conduct reconnaissance and remote operations.

Firewall Management Center +2 IRON VIKING cyclops-blink iron-viking linux modular-malware network-edge
1r updated