Cybersecurity incident
Date: 2023-04-18 00:00:00
Affected organization: Cisco
Affected country: United Kingdom of Great Britain and Northern Ireland
Industry: Information
Event type: Exploitive
Event subtype: Exploitation of Network Infrastructure
Motive: Political-Espionage
Actor: GRU 85th Main Special Service Center (Unit 26165) (FANCYBEAR)
Actor type: Nation-State
Actor country: Russian Federation
Description: The UK National Cyber Security Centre (NCSC), US Cybersecurity and Infrastructure Security Agency (CISA), NSA, FBI, and Cisco warn of Russian state-sponsored APT28 hackers deploying a custom malware named 'Jaguar Tooth' on Cisco IOS routers, exploiting CVE-2017-6742, allowing unauthenticated access to the device.