08/31/2026
A China-linked cyberespionage group known as Fire Ant is targeting Cisco routers used in high-value and critical infrastructure networks. The group, previously known for attacking VMware environments, appears to be expanding its operations into trusted network infrastructure.
https://www.cybersecuritydive.com/news/state-actor-cisco-routers-China-espionage/829181/
An actor known as Fire Ant has expanded its reach into trusted environments, with unique tooling and stealth.