RedMike (Salt Typhoon) Exploits Vulnerable Cisco Devices of Global Telecommunications Providers
By Insikt Group®
Excerpt
Insikt group observed RedMike
exploiting privilege escalation
vulnerabilities CVE-2023-20198 and
CVE-2023-20273 to compromise
unpatched Cisco network devices
running Cisco IOS XE software.
RedMike compromised devices
of a US-based affiliate of a UK
telecommunications company, a South
African telco, and it attempted to exploit
over 1,000 Cisco devices between
December 2024 and January 2025.
CH…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Recorded Future on go.recordedfuture.com.
Mentioned in the excerpt
More from Recorded Future21
- BlueDelta Targets Defense and Diplomacy with HOOKEDGERecorded Future · Added 23 Sep
- Latin America and the Caribbean Cybercrime LandscapeRecorded Future · Added 4 Jun
- GrayCharlie Hijacks Law Firm Sites in Suspected Supply-Chain AttackRecorded Future · Added 17 Apr
- DRAT V2: Updated DRAT Emerges in TAG-140’s ArsenalRecorded Future · Added 17 Aug 2025
On the same topics
- ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoftMandiant (Google) · Published 25 Sep
- TA488 Targets Zimbra Mailservers with Half-Click ExploitsProofpoint · Published 15 Jul
- Beyond the Archive: CVE-2025-8088 Stealer Targeting Ukrainebluecyber.hashnode.dev · Published 22 Jul
- DragonBreath: Dragon in the Kernelransom-isac.com · Published 22 Apr
