Skip to content
NewA calmer, faster ZeroHour
Threat actorhighExploited in the wild

'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink

Dark Readingby Jai Vijayan ()2
AI summary · glm-5.3Summaries by Vani AI

Russia-linked Sandworm chains Cisco vulnerabilities to deploy an upgraded Cyclops Blink botnet variant the FBI disrupted in 2022.

Dark Reading reports that Sandworm, the notorious Russia-linked threat group, is chaining Cisco vulnerabilities to deploy an upgraded version of the Cyclops Blink botnet malware. The FBI previously disrupted the Cyclops Blink botnet in 2022. The activity signals renewed botnet infrastructure building by the group despite prior law-enforcement action.

Key facts
  • Sandworm chaining Cisco vulnerabilities to deploy upgraded Cyclops Blink
  • FBI disrupted the original Cyclops Blink botnet in 2022
  • Signals renewed GRU-linked botnet building despite law enforcement disruption
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

The notorious Russian threat group is spreading an upgraded version of the botnet malware, which the FBI disrupted in 2022.

Dark Reading

By Jai Vijayan · darkreading.com

Read the full article at Dark Reading

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.