Chinese Fire Ant hackers turn Cisco routers into spying platforms

August 31, 2026 · 9:04 am 2 sources

Image: BleepingComputer

Coverage

Coverage

• Chinese Fire Ant hackers turn Cisco routers into spying platforms
  BleepingComputer · August 31, 2026 14:52
  The researchers discovered Fire Ant's new tactic after finding an active GRE (Generic Routing Encapsulation) tunnel interface on a Cisco IOS XR router that could not be explained by a running configuration or commit history. [...]

More coverage

• China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
  The Hacker News · August 31, 2026 09:04
  A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System (TACACS) servers, and Linux management hosts used to route, authenticate, and manage…