BadCandy: Stealth Implant Converts IOS XE into a Persistent Surveillance Node

Cybercriminals and advanced persistent threat (APT) actors continue to evolve toward stealthier, persistence-focused, and profit-driven operations. Recent intelligence reports reveal a coordinated exploitation campaign combining high-severity vulnerabilities—the Cisco IOS XE privilege escalation flaw (CVE-2023-20198) to compromise infrastructure, deploy ransomware, and maintain deep network persistence. Both nation-state actors and financially motivated ransomware groups are leveraging these […]

The post BadCandy: Stealth Implant Converts IOS XE into a Persistent Surveillance Node appeared first on SecPod Blog.