APT28’s SNMP Attack on Cisco Routers

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

APT28 used SNMP access to exploit Cisco routers and gain network access, utilizing weak SNMP community strings and exploiting a vulnerability to deploy Jaguar Tooth.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.