China-Linked Hackers Compromise Cisco Router Devices to Infiltrate Networks
China-linked threat actors have used multiple methods to compromise widely deployed Cisco router models, turning them into entry points for monitoring and infiltration. Researchers say the attackers gained control of network infrastructure, collected intelligence and credentials, then maintained persistent, concealed access. The campaign is associated with UNC3886, tracked by Mandiant, and more than 1,000 Cisco devices were reportedly targeted.