The researchers discovered Fire Ant's new tactic after finding an active GRE (Generic Routing Encapsulation) tunnel interface on a Cisco IOS XR router that could not be explained by a running configuration or commit history. [...]
Chinese Fire Ant hackers turn Cisco routers into spying platforms
Summary + source link. No paywalls, no tracking.