ASA
What kind of company would even use Cisco ASA? No wonder you been hacked
2 replies (most recent on top)
You do know that Palo was hacked with the same thing...
Almost certainly both companies are using some off the shelf subroutine.
https://techcrunch.com/2024/04/17/palo-alto-networks-firewall-bug-under-attack-brings-fresh-havoc-to-thousands-of-companies/
https://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/
Interesting read. The TL:DR being this was likely a nation state actor, and while they have worked out the tools implanted into a compromised device, the source of the comprise hasn't been found. Whether that is another zero day, creds gained from phishing or even proper spies in those target orgs... maybe we will never know.