{
  "id": 4924982,
  "title": "Cisco routers are being turned into surveillance vantage points to hoover up data on trusted networks — and it's all thanks to this new malware",
  "url": "https://urgent.news/2026/09/01/cisco-routers-are-being-turned-into-surveillance-vantage-points-to",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-01T19:05:00.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/security/cisco-routers-are-being-turned-into-surveillance-vantage-points-to-hoover-up-data-on-trusted-networks-and-its-all-thanks-to-this-new-malware"
  },
  "original_language": "en",
  "account": "Cybersecurity researchers have found that the China-linked Fire Ant cyberespionage group is now targeting routers, authentication systems, and Linux management hosts. Compromised routers are being transformed into full-fledged operational platforms to collect traffic, manipulate command output, and suppress logging. Fire Ant has also been seen targeting TACACS servers to harvest credentials and weaken audit logs. The goal of the campaign is to establish a \"target behind the target,\" leveraging trust relationships to gain broader espionage reach.",
  "summary": "Fire Ant is now targeting routers, authentication servers, and Linux management hosts, using them as stepping stones.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}